Satellite Cybersecurity Architect

About the role

Aerospacelab designs and manufactures small satellites and develops earth observation services, with offices in Belgium, France, Switzerland and the US. Satellites are becoming connected, software-defined systems exposed to cyber threats, so the company seeks a Satellite Cybersecurity Architect to make sure the software flown is secure by design and that satellites cannot be compromised. The role defines and owns the cybersecurity architecture across satellite platforms.

Key responsibilities

• Define and own the satellite cybersecurity architecture, covering on-board software, unit-level firmware and interfaces between units.
• Establish secure coding standards and best practices (secure SDLC, code review, static/dynamic analysis) and support software teams in applying them.
• Design and implement secure boot and trusted execution methodologies across on-board computers and units.
• Own the strategy and processes for cryptographic key management: generation, distribution, storage, rotation and revocation.
• Perform threat modeling and security risk assessments on software and communication links (TT&C, payload data links) and define mitigations.
• Define security requirements at satellite and unit level and ensure they are traceable and verified through the V&V process.
• Work with the Satellite Software Architect, embedded software and FPGA/EE engineers to embed security early, and with operators and ground-segment IT security teams to keep security consistent from on-board software to ground infrastructure.
• Stay current on emerging space cybersecurity threats and standards and improve the security posture based on lessons learned.

Required profile

• MSc or PhD in Computer Science, Cybersecurity or a related field.
• Solid experience in embedded systems security, with hands-on knowledge of C and Python.
• Practical experience with secure boot, trusted execution or hardware root-of-trust concepts.
• Solid understanding of cryptography fundamentals and key management (symmetric/asymmetric encryption, key exchange, PKI).
• Ability to lead technical discussions, structure trade-offs and communicate security decisions to multidisciplinary teams.
• Ability to work across the hardware/software boundary and to drive security practices to adoption with a high degree of autonomy.
• Demonstrated ability to work across teams, good communication skills and fluency in English.

Nice to have

• Experience in the space sector or other safety/security-critical industries (automotive, defense, medical, industrial control).
• Familiarity with space cybersecurity standards (CCSDS, ECSS-Q-ST-80, NIST SP 800-53/800-171) and secure communication protocols for space links (CCSDS Space Data Link Security, TLS/DTLS).
• Familiarity with HSMs, secure elements or TPMs, and experience with penetration testing, fuzzing or vulnerability assessment.
• Certifications such as CISSP, OSCP or GICSP.

The position is permanent within the Avionics department, based in Belgium and France, with a flat hierarchy, flexible ways of working and a salary package consistent with experience.