Engineer Aviation Information Security

Task Responsibilities:           

• Act as subject matter expert (SME) for cybersecurity controls protecting critical aviation information and communication systems 
• Manage information security risks, vulnerabilities, and mitigations by performing and supporting risk assessments, threat modeling, and security impact analyses 
• Perform information and cybersecurity risk assessments, threat modeling, vulnerability management, and define mitigation measures to ensure continuous protection of critical systems. 
• Handle cybersecurity incidents and operational events affecting critical information and communication technology (ICT) systems related to aircraft operation.
• Handle PKI infrastructure and associated cryptographic and identity‑based trust services, including lifecycle management, documentation, and procedures. 
• Support the implementation, operation, and continuous improvement of aircraft log analysis, including security monitoring, event correlation, anomaly detection, and training of relevant personnel. 
• Provide cybersecurity expertise, guidance, and training to internal stakeholders. 
• Act as an IT representative within the Aircraft Information Security Center. 
• Manage internal and external information security reporting.
• Review and support secure architectures, configurations, and design proposals related to aircraft and avionics systems. 

Essential Requirements For The Position:       

• Master’s Degree or equivalent in Computer Science, Information Security, Aeronautical Engineering or a related technical discipline. 
• 5+ years of professional experience in IT, cybersecurity, or the airline/aviation domain, preferably within aviation, OT/ICS environments, or other safety‑critical industries. 
• Solid understanding of IT/OT network architectures, segmented networks, and secure communication protocols for avionics and aircraft data systems; knowledge of airline and aircraft systems is an asset. 
• Strong expertise in network security, PKI/cryptography, secure configuration, identity‑based trust models, and cloud/virtualized environments with secure deployment practices. 
• Experience performing vulnerability assessments, risk analysis, and implementing security controls for embedded systems and safety‑critical platforms, including avionics, airline ground support, and maintenance systems 
• Hands‑on experience with automated log analysis, event correlation, and anomaly detection for aircraft systems or other telemetry‑based monitoring environments 
• Familiarity with aviation cybersecurity standards and regulations, including DO‑326A / ED‑202A, DO‑356A / ED‑203A, DO‑355A / ED‑204A, manufacturer‑specific cybersecurity requirements, and regulatory frameworks such as EASA Part‑IS (or demonstrated ability to quickly acquire this knowledge). 
• Strong analytical, problem-solving, and troubleshooting skills, with the ability to assess complex technical issues under operational and safety constraints. 
• High level of responsibility, attention to detail, and commitment to excellence in safety‑critical and high‑reliability environments. 
• Ability to communicate effectively with technical and operational stakeholders, including Engineering, Maintenance, Flight Operations, and external partners. 
• Commitment to continuous professional development and maintaining up‑to‑date knowledge of evolving cybersecurity, aviation, and regulatory technologies. 
• Fluent in English (spoken and written); proficiency in additional languages is a strong asset. 
• Excellent interpersonal and communication skills with a customer‑focused and collaborative mindset. 
• Comfortable working in a multicultural, fast‑paced, and highly regulated environment, with strong cross‑functional collaboration. 

Working Conditions:            

• Permanent, full-time contract based in our HQ in Luxembourg.
• Occasional travel may be required.
• A Certificate of good conduct (Casier judiciaire, Polizeiliches Führungszeugnis) will be required in case of a positive selection.