Security Systems Architect

Quick Facts

• Role: Security Systems Architect (Cyber Security)
• Focus: Cybersecurity systems architecture for helicopter avionics/embedded systems

Description

You will integrate cybersecurity engineering processes into the overall engineering process landscape, synchronize them with support processes, and define security requirements for embedded systems. The role includes assessing helicopter configuration security risks, overseeing development of security functions against their design assurance level, and formalizing evidence to meet airworthiness needs and support security accreditation. You will coordinate with the helicopter avionics architect to define and develop the cybersecurity component of the avionics architecture.

Responsibilities

• Formalize cybersecurity engineering process integration into the company’s overall engineering processes and ensure synchronization with support processes
• Assess cybersecurity risks of the helicopter configuration and define required security requirements for the embedded system (including functional and assurance aspects)
• Monitor development of security functions according to their design assurance level
• Formalize evidence for compliance with airworthiness requirements and contribute to security accreditation of the helicopter
• Define and develop the cybersecurity component of the helicopter avionics architecture in coordination with the avionics architect

Requirements

• Bachelor’s degree in aerospace engineering, mechanical engineering, or computer science with extensive experience and further education or PhD; or Master’s degree with extended experience and further education or PhD
• At least 5 years of professional experience in embedded systems or cyber security, including strong systems engineering experience
• Fluent German and English (French desirable)
• Knowledge of aviation standards such as ARP 4754, ARP 4761, ED-202, ED-203
• Ability to master functional specifications of security mechanisms (authentication, access control, rights management, signatures, firewall, encryption, segregation, intrusion detection)
• Awareness of potential compliance risks and commitment to act with integrity