Cyber Security Engineer

Cybersecurity Engineer

As part of the Security discipline of the Engineering group of THALES Belgium, the Cybersecurity Engineer will contribute to the successful development of a wide array of products through the definition, implementation and testing of their cybersecurity aspects. They will consider the Thales Cybersecurity standards as well as the applicable regulatory frameworks and emerging best practices in the field. The contributions of the Cybersecurity Engineer begin at the early market capture phases and span until the final qualifications and service phases.

The Cybersecurity Engineer needs to be a technical passionate. Based on their existing background in IT, telecommunication systems and/or cybersecurity, they will be eager to discover new technologies to continuously expand and reinforce their expertise in these fields. They will put their expertise at the service of both the security-centric projects of the Security discipline and the secure-by-design aspects of the projects lead by the other disciplines of the company.

Main Responsibilities:

• Bring and maintain state of the art knowledge for their field of expertise, specialty or domain;
• Master and keep up to date with the applicable civil and defense cybersecurity regulatory frameworks;
• Act as a focal point of contact for all cybersecurity considerations in bid and projects;
• Support the Architecture roles on the cybersecurity aspects of specification and design, Make/Team/Buy decisions and technical interface with the customer;
• Contribute to the technical documentation (e.g. High Level Design, Low Level Design, Configuration Documents, User Manuals, Testing plan);
• Perform the detailed cybersecurity risk assessment, design, implementation and testing activities as needed to reach bids and projects objectives;
• Support the teams responsible for the implementation and testing of the solution by providing technical expertise on various aspects of the product under development, ensuring the development goals are met and the traceability from the user requirements to the final tests is maintained.

Profile:

• Engineering degree in Information Technology, Telecommunications and/or Cybersecurity.
• Three or more years of professional experience in the design, development, and/or security testing of cybersecurity-oriented products such as IP encrypts or firewalls.
• Demonstrable domain specific expertise on a hardware or software security topic (e.g. side-channel attacks, intrusion detection, Secure Boot, confidential computing, etc.)
• Three or more years of professional experience on at least three of the following topics:
• Cybersecurity risk assessment and remediation, preferably using the EBIOS Risk Manager methodology.
• Threat modelling.
• System, software and/or hardware security architecture definition and/or review, including domain-specific technical documentation.
• Source code review and coding rules definition for C/C++, Java and/or Rust.
• Common Criteria process: redaction of documentation, follow-up of the process deployment.
• Security testing (including vulnerability assessment, targeted interface and penetration testing): Strategy definition, test plan elaboration, execution and reporting.
• IP networks architecture and troubleshooting.
• Linux kernel high-level knowledge.
• Experience in these domains is a valuable asset:
• Translation of business requirements into technical solutions.
• System architecture using model-based system engineering methodology.
• System Engineering tools: Capella, Polarion, Jira, Git, BitBucket, LaTeX.
• Packaging, deployment and/or troubleshooting of Linux in the context of embedded systems.
• Technical and governance constraints related to classified information handling.
• Knowledge sharing through in-person seminars, webinars and/or whitepapers redaction.
• Eager to work with multiple, diverse technical integrations, technologies and processing environments.
• Passion for technologies, continuous education and problem solving.
• Good communication skills, both verbally and written.
• Fluent in English (professional capacity); fluency in French or Dutch is a valuable asset.
• Customer satisfaction and results oriented.

Future opportunities will allow you to discover other domains or sites. You will be able to evolve and grow your competences in different areas: Room and attention to personal development Build your talents in another domain of Thales Group, discovering new products, new customers, new country or go to a more complex Solution Choose between a technical expertise or a leadership path Build an international career within a leading Engineering Group.