Cyber Security

pSelect how often (in days) to receive an alert: /p pClosing Date: 17 November :59 CET/CEST /p pDirectorate: Technology, Engineering and Quality /p pThis is a non-renewable postfor a limited duration of 4 years andopen for the specific needs of a National Project.bAccordingly, the external candidate selected for this post will continue to be considered an external candidate for the purposes of any future applications to the Agency. /b /p h3bDescription /b /h3 pCyber Security/Reverse Engineer in the System Security Section (TEC-SES), End-to-End Systems Division, Systems Department, Directorate of Technology, Engineering and Quality. /p pThe System Security Section is responsible for end-to-end system security engineering for the Agency’s missions, projects and activities across space, ground and user segments and communication links, at system, subsystem, element and equipment levels. Its responsibilities span the mission lifecycle from the study phase and definition of requirements to design, development, security integration and verification, and security service preparation, across the full stack, from the physical to the application layer. /p pTo fulfil these functions, the System Security Section defines and conducts the associated research and development (RD) activities and studies and implements the necessary security engineering standards. /p pUsing its security laboratory facilities, the System Security Section performs vulnerability assessments across all areas within its remit and proposes detection methods and mitigation and protection measures using security assessment tools and equipment. /p pThis position will support a third‑party activity aimed at developing a national security assessment and evaluation laboratory capability. /p h3bDuties /b /h3 pYour tasks and responsibilities will include: /p ul lisupporting the Project Manager by providing recommendations, guidance and plans for test and evaluation laboratory capability development and technologies for security evaluation; /li liregular reporting to the Project Manager on the status of the duties assigned under the project; /li liengaging directly with and advising national customers and ESA experts on options for developing and maturing security evaluation capabilities; /li lideriving technical requirements and reviewing, assessing and evaluating project proposals, including the security design, development, implementation, qualification and validation; /li lifostering new security application areas for multidisciplinary activities, placing emphasis on innovative concepts and cutting‑edge technologies in the field of reverse engineering and security evaluation laboratories; /li lisupporting laboratory activities as required; /li licontinuously following technological and scientific developments relevant to the position, particularly emerging threats, exploits and industry trends; /li licontributing, as requested, to other technical activities beyond the main project within your area of expertise. /li /ul pReverse engineering and binary analysis /p pVulnerability research and security evaluation /p pEmbedded systems, firmware and platform security /p pSystems, runtime and network analysis /p pSecurity evaluation methodologies and laboratory technologies /p pAdvanced technical analysis and research /p pResult Orientationbr/Operational Efficiencybr/Fostering Cooperationbr/Relationship Managementbr/Continuous Improvementbr/Forward Thinking /p pA master’s degree in a relevant field and, in principle, three years of relevant professional experience are required for this post. Alternatively, candidates with a bachelor’s degree and an additional four years of relevant professional experience may be considered. /p h3bAdditional requirements /b /h3 pHands‑on experience in reverse engineering, exploitation and vulnerability assessment across IT and embedded‑system technologies, including but not limited to: /p ul libinary analysis and static and dynamic analysis of native binaries; /li lidisassembly and decompilation; /li liELF and PE, with the ability to analyse proprietary formats; /li lipopular architectures such as ARM/ARM64, RISC‑V and x86; /li lisecure boot, hardware root of trust and trusted execution environments and related vulnerabilities; /li liOS processes, threads and virtual memory; /li lifirmware unpacking and repacking and identification of compression/encryption/encoding; /li lisystem call tracing; /li listrong C/C++ and assembly, with the ability to read unfamiliar C and assembly code fluently; /li licryptographic primitives and their implementation; /li licapturing and analysing traffic, observing runtime behaviour, and network protocol analysis and dissecting. /li /ul pExperience in the following areas would be beneficial: /p ul lireversing code for other processor architectures or families, such as Motorola and Texas Instruments; /li limicrocode analysis; /li lidetermination of microprocessor instruction sets from extracted