Satellite Cybersecurity Architect

ph3About Aerospacelab /h3 pOur mission is supported by an ambitious vertically integrated approach: design manufacture of small satellites combined with development of earth observation services. /p pSince its creation in 2018, the company has already grown substantially. Our team gathers more than 25 engineering expertise, from hardware design to software development data science. /p pIn 2026, Aerospacelab counts offices in Louvain-la-Neuve (Belgium), Toulouse (France), Lausanne (Switzerland) and US West Coast with more than 350 full-time employees, with the ambition to position itself as the European leader in small satellites. /p h3Role Overview /h3 pSatellites are increasingly connected, software-defined systems
- which means they are also increasingly exposed to cyber threats, from the on-board software running on our units to the links connecting them to the ground. As we continue to expand our team, we are seeking a talented and motivatedbSatellite Cybersecurity Architect /bto make sure the software we fly is secure by design and that our satellites cannot be compromised. /p pAs Satellite Cybersecurity Architect, you will define and own the cybersecurity architecture across our satellite platforms: setting the secure development practices our software teams follow, designing and implementing mechanisms such as secure boot, and owning the strategy for how cryptographic keys are generated, distributed, stored, and rotated across the fleet. You will work closely with the Satellite Software Architect, Embedded Software Engineers, and EE/FPGA engineers to embed security into the architecture from the start rather than bolting it on afterwards, and with satellite operators and VV teams to make sure security requirements are actually verified and hold up in operations. /p pAt Aerospacelab, our motto is work hard, play hard. We strive to innovate, in a fun and inclusive work environment. We work in short cycles
- no waiting for years before seeing designs go live and get valuable feedback. Expect an exciting job, where you will learn constantly and help make sure that what we build stays trustworthy once it's in orbit. /p h3Key Activities /h3 ul liDefine and own the satellite cybersecurity architecture, covering on-board software, unit-level firmware, and the interfaces between units. /li liEstablish secure coding standards and development best practices (e.g. secure SDLC, code review guidelines, static/dynamic analysis) and support software teams in applying them. /li liDesign and implement secure boot and trusted execution methodologies and flows across our on-board computers and units. /li liDefine and own the strategy and processes for cryptographic key management: generation, distribution, storage, rotation, and revocation across satellite platforms and missions. /li liPerform threat modeling and security risk assessments on satellite software and communication links (TTC, payload data links), and define mitigations. /li liDefine security requirements at satellite and unit level, and ensure they are traceable and verified through the VV process. /li liCollaborate with the Satellite Software Architect, Embedded Software Engineers, and FPGA/EE engineers to embed security into architectural and design decisions from the start. /li liCoordinate with satellite operators and ground-segment IT security teams to make sure security is maintained consistently from on-board software to ground infrastructure. /li liStay current on emerging space cybersecurity threats and standards, and continuously improve Aerospacelab's security posture based on lessons learnt. /li /ul h3Must Have /h3 ul liMSc, or PhD degree in Computer Science, Cybersecurity, or related field. /li liSolid experience in embedded systems security, with hands-on knowledge of C and Python. /li liPractical experience with secure boot, trusted execution, or hardware root-of-trust concepts. /li liSolid understanding of cryptography fundamentals and key management practices (symmetric/asymmetric encryption, key exchange, PKI). /li liAbility to lead technical discussions, structure trade-offs clearly, and communicate security decisions to multidisciplinary teams that may not have a security background. /li liAbility to work across the hardware/software boundary. /li liDemonstrated ability to work across teams to drive security practices to adoption with a high degree of autonomy. /li liGood communication skills and fluency in English. /li /ul h3Nice To Have /h3 ul liExperience in the space sector, or in another safety/security-critical embedded industry (automotive, defense, medical, industrial control systems). /li liFamiliarity with space cybersecurity standards and guidance (e.g. CCSDS security standards, ECSS-Q-ST-80, NIST SP 800-53/800-171, or equivalent). /li liExperience with secure communication protocols for constrained or space links (e.g. CCSDS Space Data Link Security, TLS/DTLS for embedded systems). /li liFamiliarity with hardware securit