Cybersecurity Specialist – Defensive Design, Risk, Vulnerability & GRC

Job Description

Location: Prague (Hybrid / On-site at client premises) & occasional European travel
Clearance requirement: Eligibility for EU SECRET / NATO SECRET Personal Security Clearance (PSC)

About the Role

We are expanding our cybersecurity team supporting high-profile European space and critical infrastructure programmes (such as Galileo, EGNOS, GOVSATCOM, Copernicus, and IRIS²).

Because our project portfolio spans multiple distinct workstreams, we are looking for specialists across several different areas—including Defensive Security Design, Vulnerability Management, Technical Risk Assessment, and Cyber GRC. We do not expect a single candidate to cover all of these disciplines. Whether you are a hands-on security architect, a risk analyst, a vulnerability specialist, or a GRC consultant, we want to match your specific strengths to the right track within our team

 

Track 1: Defensive Security Design & Architecture

• Embed security-by-design and defense-in-depth principles (physical, network, host, application, and data layers) across the system development lifecycle.
• Maintain security technical baselines, translate mission needs into actionable cybersecurity requirements (e.g., in DOORS), and ensure end-to-end traceability.
• Participate in engineering milestones (PDR, CDR, AR), Configuration Change Boards (CCB), and Anomaly Review Boards (ARB) to evaluate the security impact of system changes.
• Review vendor deliverables, Statements of Compliance (SoC), and Verification Control Documents (VCD).

Track 2: Vulnerability Assessment & Lifecycle Management

• Systematically review security weaknesses in complex systems, assign severity levels, and define practical operational mitigations.
• Track the lifecycle of known vulnerabilities and verify the implementation of mitigations by system operators and contractors.
• Support security incident interfaces, prepare technical inputs for Cyber Review Boards, and contribute to vulnerability databases.

Track 3: Technical Risk Assessment

• Perform end-to-end Security Risk Assessments (SRA)—from asset and threat modeling to evaluating impact, likelihood, and risk reduction.
• Maintain and update Security Risk Registers and track the progress of Risk Treatment Plans with stakeholders.
• Analyze the security impact of operational or infrastructure changes and incorporate penetration test findings into system security plans.

Track 4: Cyber Governance, Compliance & Accreditation (GRC)

• Support security accreditation processes and prepare documentation packages for Security Accreditation Boards.
• Align technical specifications and security policies with evolving EU regulations and international standards (e.g., ISO/IEC 27001, ISO/IEC 27005, NIS).
• Contribute to internal cybersecurity audits, operational compliance checks, and security awareness initiatives.

 

Qualifications

What We Are Looking For

You do not need experience in every area listed above—solid expertise in at least one of these domains is what matters most:

• Relevant Background: Proven experience in at least one of the following: security architecture/design, vulnerability management, technical risk assessment, or IT/cyber GRC and auditing.
• Frameworks & Standards: Familiarity with relevant security standards or regulations (such as ISO/IEC 27001, ISO/IEC 27005, NIST, or NIS).
• Analytical & Documentation Skills: Ability to produce clear technical notes, risk registers, compliance reviews, or audit reports depending on your specialization.
• Language: Fluency in English (written and spoken) to collaborate effectively across international technical teams and governance boards.
• Security Clearance: Ability to obtain (or already hold) a SECRET UE / EU SECRET Personal Security Clearance. (Bonus: Existing authorization for Galileo PRS handling)

Additional Information

Why Join Us?

• Tailored Role: Join a growing team where your responsibilities are aligned with your actual core expertise rather than a one-size-fits-all checklist.
• Unique Domain: Contribute to flagship European space, satellite navigation, and secure communications programmes.
• Growth & Mobility: Opportunity to collaborate closely with specialists in adjacent tracks and expand your skills over time if you wish.
• International Environment: Work alongside top European security experts and institutions in Prague and across Europe.

Company Description

Sopra Steria Benelux is a significant player in cybersecurity, offering various services to protect organizations from cyber threats. Our cybersecurity department comprises a team of professionals specializing in areas such as:

• Cybersecurity Consulting
• Threat Detection and Response
• Penetration Testing
• Security Architecture and Design
• Identity and Access Management
• Data Protection and Privacy