Cybersecurity Specialist – Defensive Design, Risk, Vulnerability & GRC

Location: Prague (Hybrid / On-site at client premises) & occasional European travel

Clearance requirement: Eligibility for EU SECRET / NATO SECRET Personal Security Clearance (PSC)

About the Role

We are expanding our cybersecurity team supporting high-profile European space and critical infrastructure programmes (such as Galileo, EGNOS, GOVSATCOM, Copernicus, and IRIS²).

Because our project portfolio spans multiple distinct workstreams, we are looking for specialists across several different areas—including Defensive Security Design, Vulnerability Management, Technical Risk Assessment, and Cyber GRC. We do not expect a single candidate to cover all of these disciplines. Whether you are a hands-on security architect, a risk analyst, a vulnerability specialist, or a GRC consultant, we want to match your specific strengths to the right track within our team

Track 1: Defensive Security Design & Architecture

• Embed security-by-design and defense-in-depth principles (physical, network, host, application, and data layers) across the system development lifecycle.
• Maintain security technical baselines, translate mission needs into actionable cybersecurity requirements (e.g., in DOORS), and ensure end-to-end traceability.
• Participate in engineering milestones (PDR, CDR, AR), Configuration Change Boards (CCB), and Anomaly Review Boards (ARB) to evaluate the security impact of system changes.
• Review vendor deliverables, Statements of Compliance (SoC), and Verification Control Documents (VCD).
Track 2: Vulnerability Assessment & Lifecycle Management

• Systematically review security weaknesses in complex systems, assign severity levels, and define practical operational mitigations.
• Track the lifecycle of known vulnerabilities and verify the implementation of mitigations by system operators and contractors.
• Support security incident interfaces, prepare technical inputs for Cyber Review Boards, and contribute to vulnerability databases.
Track 3: Technical Risk Assessment

• Perform end-to-end Security Risk Assessments (SRA)—from asset and threat modeling to evaluating impact, likelihood, and risk reduction.
• Maintain and update Security Risk Registers and track the progress of Risk Treatment Plans with stakeholders.
• Analyze the security impact of operational or infrastructure changes and incorporate penetration test findings into system security plans.
Track 4: Cyber Governance, Compliance & Accreditation (GRC)

• Support security accreditation processes and prepare documentation packages for Security Accreditation Boards.
• Align technical specifications and security policies with evolving EU regulations and international standards (e.g., ISO/IEC 27001, ISO/IEC 27005, NIS).
• Contribute to internal cybersecurity audits, operational compliance checks, and security awareness initiatives.

Function: Information Technology
Experience Level: Mid-Senior Level