Junior Professional in Operational CyberSecurity

Description

Within ESA’s IT Department, the IT Security Section houses ESACERT, which is ESA’s Computer Emergency Response Team (CERT). ESACERT’s main task is to provide a cyber security incident response, but the team currently also performs many other activities such as security communications, awareness and phishing campaigns, proactive security services (vulnerability scanning, pentesting, etc.), security monitoring (EDR, SIEM) and maintains relationships with other CERTs and Security Operation Centres (SOCs). In order to do this, ESACERT relies on a broad range of advanced tools and solutions.

The ESA Security Office is currently implementing C-SOC, which will become the ESA-wide CyberSecurity Operations Centre. In future, C-SOC will provide some of the services currently offered by ESACERT, allowing ESACERT to focus on the main tasks of incident response. C-SOC will provide services to all of ESA and receive data and information from various tenants, including many space-specific systems and applications. C-SOC will be co-operated by the IT Department and the Directorate of Operations.

ESA is looking for a Junior Professional who is passionate about cyber security operations and can help the IT department in building the future operating model for C-SOC, ensuring the establishment of clear interfaces, roles and responsibilities between the SOC and the CERT.

The post is initially foreseen to be based in ESRIN, Frascati, Italy and is likely to move to ESEC, Redu, Belgium at some point in the future.

Duties

During your first couple of months in ESA, you will have the possibility to become fully acquainted with both ESACERT and the C-SOC project, which will be carried out by an international consortium of industrial partners.

You will then contribute to the design of C-SOC, focusing on the necessary interfaces between ESACERT and C-SOC. 

After the completion of the design, you will closely follow the implementation of C-SOC and take the lead in the testing and operational validation of the interfaces, ensuring optimal integration.

You will also test and validate (together with the ESACERT team) the C-SOC services that will replace existing ESACERT services such as the EDR, vulnerability management and SIEM, in order to ensure that the C-SOC service performance will exceed the existing ESACERT services.

Development programme

In addition to your daily work, you will take part in an extensive learning and development programme. From day one, you will learn on the job and benefit from tailored development opportunities, including explosure to different business areas of ESA and participation in technical and key skills training courses.

On top of this, you will have additional training to build up specific skills and knowledge as well as all the support you need to pursue your career in ESA.

During your time at ESA, you will have the possibility to be embedded in the ESACERT team and be exposed to and trained on all related operational security tools and procedures.

During implementation of the C-SOC project, you will be able to receive training on the proposed tools and solutions and to test and validate their functioning in an operational environment in direct collaboration with industry and vendors.

Technical competencies

Behavioural competencies

Result Orientation
Operational Efficiency
Fostering Cooperation
Relationship Management
Continuous Improvement
Forward Thinking

Education

A Master's degree in computer science, cyber security or a similar domain is required for this post.

Additional requirements

You should have between two and three years of professional experience, preferably in a Security Operations Center, after completion of your Master’s degree.

Participation in one of ESA ‘s entry-level programmes, i.e. Young Graduate Trainee, National Trainee, or Research Fellow Programmes, will be recognised as eligible experience.

Specificities

The ESA Junior Professional Programme has a forward-looking perspective. Subject to confirmed good performance, both technically and behaviourally, it is the intention to offer you a permanent contract at the end of the three years. As such, this initiative represents a significant investment by ESA in your personal and professional development. The programme is designed to provide you with the required knowledge and skills in order to ensure an optimal match, and to allow you to fulfil your role as effectively as possible. You can expect to be given many opportunities to develop your professional experience and competencies, to learn from ESA experts and to contribute to ESA activities.

Recruitment will take place at the A1 grade. You can expect to be upgraded to A2 at the end of the fourth year, if you are offered a permanent position at the end of your Junior Professional assignment.