Space Cybersecurity Manager M - F H/F

Détail du poste

Space is becoming more strategic and competitive than ever. Tomorrow's space leaders will not simply launch satellites into orbit, they will be able to move them, reposition them, extend their lifetime, and maximize their performance in space.

Since 2017, Exotrail has been developing and operating cutting-edge in-space mobility solutions for commercial, institutional, and defense customers. From our high-performance propulsion system spaceware to our orbital transfer vehicle spacevan, we enable satellites to go farther, stay operational longer, and achieve more.

Today, more than 200 Exotrailers across Massy and Toulouse are working together to make space operations more efficient and sustainable.

Backed by over €75 million in funding, we are pursuing a clear mission:

Making space a sustainable frontier for future generations.

As part of our In-Orbit Services (IoS) Business Unit, we are looking for a Space Cybersecurity Manager to implement and oversee cybersecurity activities across our space programs and products.

Working at the intersection of engineering, program management, and cybersecurity, you will ensure that security is embedded throughout the entire lifecycle of our systems, from risk assessment and architecture design to operations and continuous security monitoring.

Security Governance & Risk Management

- Define, maintain, and manage product security documentation throughout the project lifecycle.
- Develop and maintain:

- Security Management Plan
- Security Risk Assessment
- Security Risk Register
- Security Treatment Plan
- Security Vulnerability Assessment
- Security Monitoring and Incident Handling Plan
- Ensure compliance with company policies, customer requirements, and applicable security standards.

Define, maintain, and manage product security documentation throughout the project lifecycle.

Develop and maintain:

- Security Management Plan
- Security Risk Assessment
- Security Risk Register
- Security Treatment Plan
- Security Vulnerability Assessment
- Security Monitoring and Incident Handling Plan

Security Management Plan

Security Risk Assessment

Security Risk Register

Security Treatment Plan

Security Vulnerability Assessment

Security Monitoring and Incident Handling Plan

Ensure compliance with company policies, customer requirements, and applicable security standards.

Security Risk Analysis & Mitigation

- Lead security working groups and coordinate risk assessment activities.
- Perform and maintain security risk analyses for space systems and embedded products.
- Work closely with system and product architects to define and implement cybersecurity mitigation strategies.
- Ensure identified security controls are effectively deployed and verified.

Lead security working groups and coordinate risk assessment activities.

Perform and maintain security risk analyses for space systems and embedded products.

Work closely with system and product architects to define and implement cybersecurity mitigation strategies.

Ensure identified security controls are effectively deployed and verified.

Security Assurance & Validation

- Support and coordinate security audit activities, including:

- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Software Composition Analysis (SCA)
- Penetration Testing
- Monitor remediation actions and ensure vulnerabilities are properly addressed.
- Contribute to product security reviews throughout development and qualification phases.

Support and coordinate security audit activities, including:

- Static Application Security Testing (SAST)
- Dynamic Application Security Testing (DAST)
- Software Composition Analysis (SCA)
- Penetration Testing

Static Application Security Testing (SAST)

Dynamic Application Security Testing (DAST)

Software Composition Analysis (SCA)

Penetration Testing

Monitor remediation actions and ensure vulnerabilities are properly addressed.

Contribute to product security reviews throughout development and qualification phases.

Security Operations & Continuous Improvement

- Ensure the continued security posture of products and systems throughout their operational lifecycle.
- Monitor emerging threats and vulnerabilities affecting Exotrail products and technologies.
- Coordinate response activities and security incident management when required.
- Promote a strong cybersecurity culture within engineering and project teams.

Ensure the continued security posture of products and systems throughout their operational lifecycle.

Monitor emerging threats and vulnerabilities affecting Exotrail products and technologies.

Coordinate response activities and security incident management when required.

Promote a strong cybersecurity culture within engineering and project teams.

Cross-Functional Collaboration

- Work closely with Program Managers, Product Architects, Engineering teams, Bid Managers, and the Corporate Information Security team.
- Interface with customers, suppliers, and external stakeholders regarding security topics.
- Support bid and proposal activities by contributing to cybersecurity requirements and compliance strategies.
- Represent cybersecurity topics during project reviews and customer meetings.

Work closely with Program Managers, Product Architects, Engineering teams, Bid Managers, and the Corporate Information Security team.

Interface with customers, suppliers, and external stakeholders regarding security topics.

Support bid and proposal activities by contributing to cybersecurity requirements and compliance strategies.

Represent cybersecurity topics during project reviews and customer meetings.

Required Experience

- Master's degree in Engineering, Cybersecurity, Computer Science, or a related field.
- At least 5 years of experience in cybersecurity, preferably within embedded systems, aerospace, defense, industrial systems, or other critical environments.
- Strong experience conducting cybersecurity risk assessments and defining mitigation strategies.
- Experience working in multidisciplinary engineering projects involving both hardware and software products.
- Knowledge of space systems or regulated industries is highly valued.

Master's degree in Engineering, Cybersecurity, Computer Science, or a related field.

At least 5 years of experience in cybersecurity, preferably within embedded systems, aerospace, defense, industrial systems, or other critical environments.

Strong experience conducting cybersecurity risk assessments and defining mitigation strategies.

Experience working in multidisciplinary engineering projects involving both hardware and software products.

Knowledge of space systems or regulated industries is highly valued.

Technical Skills

- Strong knowledge of cybersecurity frameworks and regulations such as ISO 27001, NIS2, and cybersecurity best practices.
- Experience performing security risk assessments using methodologies such as EBIOS Risk Manager (EBIOS RM) or equivalent.
- Knowledge of vulnerability assessment techniques and security testing methodologies.
- Familiarity with SAST, DAST, SCA, and penetration testing activities.
- Understanding of secure-by-design principles for embedded and connected systems.
- Experience working with standards and engineering frameworks such as ECSS, NPR, ISO, or equivalent.
- Ability to define and maintain security documentation throughout the product lifecycle.
- Understanding of vulnerability management and security monitoring processes.

Strong knowledge of cybersecurity frameworks and regulations such as ISO 27001, NIS2, and cybersecurity best practices.

Experience performing security risk assessments using methodologies such as EBIOS Risk Manager (EBIOS RM) or equivalent.

Knowledge of vulnerability assessment techniques and security testing methodologies.

Familiarity with SAST, DAST, SCA, and penetration testing activities.

Understanding of secure-by-design principles for embedded and connected systems.

Experience working with standards and engineering frameworks such as ECSS, NPR, ISO, or equivalent.

Ability to define and maintain security documentation throughout the product lifecycle.

Understanding of vulnerability management and security monitoring processes.

Soft Skills

- Strong analytical and risk assessment capabilities.
- Excellent communication and stakeholder management skills.
- Ability to work across multiple technical disciplines.
- Structured, rigorous, and detail-oriented mindset.
- Strong documentation and reporting skills.
- Autonomous, proactive, and solution-oriented approach.
- Professional proficiency in English.

Strong analytical and risk assessment capabilities.

Excellent communication and stakeholder management skills.

Ability to work across multiple technical disciplines.

Structured, rigorous, and detail-oriented mindset.

Strong documentation and reporting skills.

Autonomous, proactive, and solution-oriented approach.

Professional proficiency in English.

Joining Exotrail means contributing to ambitious missions that are redefining space logistics and satellite operations.

You will help ensure the cybersecurity and resilience of cutting-edge space systems while working alongside passionate experts in a fast-growing international company at the forefront of the New Space industry.

- Company health insurance with 70% covered by Exotrail
- 50% reimbursement of public transportation costs
- Up to 2 days of remote work per week, depending on the position
- Enhanced maternity and paternity leave coverage with no seniority requirement
- Learning and development opportunities
- Well-being benefits including Moka Care, dedicated conferences, and our ExoCare Program for Moments That Matter
- 35 days of paid leave per year (Annual Leave & RTT)

Company health insurance with 70% covered by Exotrail

50% reimbursement of public transportation costs

Up to 2 days of remote work per week, depending on the position

Enhanced maternity and paternity leave coverage with no seniority requirement

Learning and development opportunities

Well-being benefits including Moka Care, dedicated conferences, and our ExoCare Program for Moments That Matter

35 days of paid leave per year (Annual Leave & RTT)

Working Environment

- Offices located in the heart of Toulouse
- Modern industrial facilities in Massy
- Free coffee, tea, and fresh fruit available on site
- International and multicultural teams
- Dynamic and rapidly growing space company

Offices located in the heart of Toulouse

Modern industrial facilities in Massy

Free coffee, tea, and fresh fruit available on site

International and multicultural teams

Dynamic and rapidly growing space company

Quality of Life at Work

- Team events and afterworks
- On-site osteopathy sessions on both sites
- Collaborative and supportive work culture

Team events and afterworks

On-site osteopathy sessions on both sites

Collaborative and supportive work culture

Our recruitment process is designed to be efficient while giving you the opportunity to meet the key stakeholders involved in the role:

HR Interview with our Talent Acquisition team to discuss your background, motivations, and career aspirations.

Hiring Manager Interview to explore your experience, skills, and fit with the team and projects.

Technical Interview with our experts to assess your cybersecurity expertise and problem-solving approach.

Final Interview to discuss the role, expectations, and answer any remaining questions.

We strive to provide feedback throughout the process and ensure a positive candidate experience.

We look forward to getting to know you and exploring how you can contribute to Exotrail's mission.