Senior Security Engineer Generalist

Role highlights:

• Security Engineer
• Espoo, Finland
• Permanent
• Hybrid

Who are we?

ICEYE is the global leader in synthetic aperture radar (SAR) satellite operations for Earth Observation, persistent monitoring, and natural catastrophe solutions; owning and operating the world's largest SAR constellation. ICEYE is headquartered in Finland and operates from five international locations with more than 600 employees from nearly 60 countries, inspired by the shared vision of improving life on Earth by becoming the global source of truth in Earth Observation.

Our satellites acquire images of Earth at any time – even when it’s cloudy or dark – providing commercial and government partners with unmatched persistent monitoring capabilities. Information derived from our SAR images helps customers make data-driven decisions to address time-critical challenges in various sectors, such as maritime, disaster management, insurance, and finance.

Our team is a tight-knit group of experts across many disciplines (e.g., engineering, software development, radar technology, etc.). We’re innovative, driven people who strive for excellence in everything we do. Teamwork, curiosity, and having fun are core values at ICEYE, and contribute to Making the Impossible possible!!

Why should you work for us?

ICEYE is at the cutting edge of new technology and we are continuing to build and operate our commercial constellation of SAR satellites. Working with ICEYE, you will be part of making the impossible possible, whilst shaping the Earth Observation industry. You will work with varied, diverse and engaged colleagues to further the ICEYE mission. At ICEYE we realise that without great people we can not succeed, therefore you will be an integral, valued and appreciated colleague, with the ability to directly shape the vision and direction of the business. 

We actively support Continuous Professional Development, and will provide access to a range of avenues to allow you to succeed, including courses, training and attendance at conferences. ICEYE is a place where your development, your growth and your success is a priority.

Responsibilities

The security engineer will be responsible for designing, implementing, and maintaining ICEYE’s security posture to ensure it meets ICEYE’s current and future security requirements. Key responsibilities include:

• Security Infrastructure: Design, implement, and manage security infrastructure, including firewalls, intrusion detection systems, and access control measures.
• Endpoint Security: Implement and manage endpoint security solutions to protect all devices connected to the organization's network.
• Vulnerability Assessment: Conduct regular vulnerability assessments and penetration testing to identify and mitigate security weaknesses.
• Security Policies: Establish and enforce security policies, procedures, and best practices to safeguard the organization's data and assets.
• Security Auditing: Perform security audits, analyze results, and recommend improvements to maintain compliance with industry standards and regulations.
• Security Documentation: Maintain detailed documentation of security configurations, incidents, and responses.
• Vendor and Third-Party Security Assessment: Conduct security assessments of vendors and third parties to ensure compliance with ICEYE’s security standards.
• Identity and Access Management (IAM): Oversee and review access control mechanisms, including conducting regular access reviews.
• Physical Security: Collaborate with facilities teams to plan and implement different physical security measures to protect data centers, server rooms, and other critical physical assets.
• Collaboration: Collaborate with IT teams and other stakeholders to integrate security measures into the overall IT infrastructure.

Required

• 7-years minimum experience in cybersecurity roles.
• Strong knowledge of cybersecurity frameworks and best practices.
• Proficiency in security tools and technologies.
• Excellent problem-solving and analytical skills.
• Effective communication and teamwork abilities.
• Ability to stay updated with the evolving cybersecurity landscape.
• Adaptability and flexibility to changing needs in a fast-growing environment.

Preferred

• Relevant certifications such as OSCP, CISSP, CISM, CompTIA Security+, or CEH.