- Job Type: Ground Staff
- Contract Duration: Permanent
- Shift: No
- Night Shift: No
Task Responsibilities:
- Act as subject matter expert (SME) for cybersecurity controls protecting critical aviation information and communication systems
- Manage information security risks, vulnerabilities, and mitigations by performing and supporting risk assessments, threat modeling, and security impact analyses
- Perform information and cybersecurity risk assessments, threat modeling, vulnerability management, and define mitigation measures to ensure continuous protection of critical systems.
- Handle cybersecurity incidents and operational events affecting critical information and communication technology (ICT) systems related to aircraft operation.
- Handle PKI infrastructure and associated cryptographic and identity‑based trust services, including lifecycle management, documentation, and procedures.
- Support the implementation, operation, and continuous improvement of aircraft log analysis, including security monitoring, event correlation, anomaly detection, and training of relevant personnel.
- Provide cybersecurity expertise, guidance, and training to internal stakeholders.
- Act as an IT representative within the Aircraft Information Security Center.
- Manage internal and external information security reporting.
- Review and support secure architectures, configurations, and design proposals related to aircraft and avionics systems.
Essential Requirements For The Position:
- Master’s Degree or equivalent in Computer Science, Information Security, Aeronautical Engineering or a related technical discipline.
- 5+ years of professional experience in IT, cybersecurity, or the airline/aviation domain, preferably within aviation, OT/ICS environments, or other safety‑critical industries.
- Solid understanding of IT/OT network architectures, segmented networks, and secure communication protocols for avionics and aircraft data systems; knowledge of airline and aircraft systems is an asset.
- Strong expertise in network security, PKI/cryptography, secure configuration, identity‑based trust models, and cloud/virtualized environments with secure deployment practices.
- Experience performing vulnerability assessments, risk analysis, and implementing security controls for embedded systems and safety‑critical platforms, including avionics, airline ground support, and maintenance systems
- Hands‑on experience with automated log analysis, event correlation, and anomaly detection for aircraft systems or other telemetry‑based monitoring environments
- Familiarity with aviation cybersecurity standards and regulations, including DO‑326A / ED‑202A, DO‑356A / ED‑203A, DO‑355A / ED‑204A, manufacturer‑specific cybersecurity requirements, and regulatory frameworks such as EASA Part‑IS (or demonstrated ability to quickly acquire this knowledge).
- Strong analytical, problem-solving, and troubleshooting skills, with the ability to assess complex technical issues under operational and safety constraints.
- High level of responsibility, attention to detail, and commitment to excellence in safety‑critical and high‑reliability environments.
- Ability to communicate effectively with technical and operational stakeholders, including Engineering, Maintenance, Flight Operations, and external partners.
- Commitment to continuous professional development and maintaining up‑to‑date knowledge of evolving cybersecurity, aviation, and regulatory technologies.
- Fluent in English (spoken and written); proficiency in additional languages is a strong asset.
- Excellent interpersonal and communication skills with a customer‑focused and collaborative mindset.
- Comfortable working in a multicultural, fast‑paced, and highly regulated environment, with strong cross‑functional collaboration.
Working Conditions:
- Permanent, full-time contract based in our HQ in Luxembourg.
- Occasional travel may be required.
- A Certificate of good conduct (Casier judiciaire, Polizeiliches Führungszeugnis) will be required in case of a positive selection.
