Executive Summary
European defence spending is rising, and France's own line is published every year: EUR 61,780 million of defence expenditure in 2025 at current prices, or 2.05%1 of GDP: above NATO's 2%1 guideline. Source: NATO, "Defence Expenditure of NATO Countries (2014–2025)", Table 1 (national currency, current prices) and Table 3 (share of GDP). That budget translates into engineering, programme and security careers at Thales, Airbus Defence and Space, MBDA, Naval Group and Dassault Aviation, but defence hiring carries requirements no other sector imposes. This guide covers them, from clearance to export-control literacy.
Understanding Security Clearances in Europe
France: The Habilitation System
France operates a three-tier clearance system managed by the SGDSN (Secrétariat général de la défense et de la sécurité nationale):
- Secret: the level at which most classified engineering work sits. Since the 2021 reform of the IGI 1300 it also covers material still bearing the legacy Confidentiel-Défense stamp. Source: SGDSN, "Fiches pratiques: protection du secret de la défense nationale", October 2021
- Très Secret: the higher level, including a specially classified tier for the most sensitive programmes; it also covers material bearing the legacy Secret-Défense stamp. The Prime Minister is the clearance authority for specially classified Très Secret; each minister is the authority for Secret and for Très Secret otherwise (SGDSN, IGI 1300, 9 August 2021)
- Diffusion Restreinte is not a third level: it is a protective marking for information that must be restricted without meeting the threshold for national-defence secrecy. Clearance itself follows an administrative investigation whose length the SGDSN states only as "several months"; no published document gives a range per level, so none is printed here
Key requirements: French or EU nationality (with exceptions), clean criminal record, financial stability assessment, no concerning foreign ties. The employer sponsors the clearance: you cannot apply independently.
EU & NATO Clearances
For multinational programmes such as FCAS or Eurodrone, NATO or EU clearances may be required alongside national ones; the IGI 1300 names the responsible minister as the clearance authority for the Confidentiel and Secret levels of both. No published document states how long the cross-national step adds, so no delay is claimed. Plan on months rather than weeks, and on your employer's security officer holding the file.
Export Control Literacy: ITAR, EAR, and EU Dual-Use
Why This Matters for Your Career
Export controls determine what you can work on, who you can work with, and where you can travel. Misunderstanding these rules can end careers and cost companies billions in fines.
Key Regulatory Frameworks
- ITAR (International Traffic in Arms Regulations): US regulation controlling defense articles and services. Even European companies working with US-origin components must comply. ITAR awareness is a hard requirement at Thales, Airbus Defence, and any company in transatlantic supply chains
- EAR (Export Administration Regulations): US dual-use export controls covering technologies with both civilian and military applications: AI, advanced computing, encryption
- EU Dual-Use Regulation (2021/821): the European framework for dual-use export control, including cyber-surveillance items
Practical Impact on Engineers
- You may need to maintain separate work environments for ITAR-controlled and non-ITAR projects
- Conference presentations and academic publications may require pre-approval
- International collaboration has strict information-sharing boundaries
- Job mobility between defense and civilian sectors requires awareness of cooling-off periods and technology retention rules
Eligibility is decided before capability, and it is decided by lists
A defence employer answers one question before reading a single line about capability: can this person be placed on this programme, working on this item. That question is not settled by talent. It is settled by two control systems, both of which are written as lists, and neither of which mentions skill.
The first governs access to classified national information. Under the IGI 1300 of 9 August 2021 the clearance authority is a minister, and the clearance attaches to the post rather than to the person, which is why an employer sponsors it and why it does not travel with a candidate between employers or countries.
The second governs the item itself. Regulation (EU) 2021/821 of 20 May 2021 requires an authorisation for the export of dual-use items listed in its Annex I, so the compliance question is which entry of that annex an item falls under. On the American side, the controlled scope is enumerated on the United States Munitions List at 22 CFR Part 121, and the registration rule is stricter than most candidates expect: under 22 CFR 122.1(a), any person engaging in the United States in the business of manufacturing, exporting or temporarily importing defence articles, or furnishing defence services, must register with the Directorate of Defense Trade Controls. The same paragraph states that a single occasion is enough, and that a manufacturer who never exports must still register. Sources: SGDSN, IGI 1300; Regulation (EU) 2021/821; 22 CFR Parts 121 and 122, 1 April 2025 edition.
The career consequence is precise. Because eligibility is a property of the post and of the item rather than of the person, a rising budget converts into hiring only where a cleared post and an authorised item already exist. The two literacies an employer can price are therefore administrative: being able to say which list an item sits on, and which authorisation a transfer needs. Both can be demonstrated on a CV without naming a programme.
The four instruments that decide whether a defence post can be filled
| Instrument | What it controls | What it asks of the employer |
|---|---|---|
| IGI 1300, 9 August 2021 | Access to classified national information | A clearance attached to the post, granted by the responsible minister |
| Regulation (EU) 2021/821, Article 3 | Export of dual-use items listed in Annex I | An export authorisation before the transfer |
| United States Munitions List, 22 CFR Part 121 | Defence articles, technical data and defence services | Classification of the item against the list |
| 22 CFR 122.1(a) | Manufacturing, exporting or temporarily importing defence articles in the United States | Registration with the Directorate of Defense Trade Controls, after a single occasion |
Sources 3 Secrétariat général de la défense et de la sécurité nationale · 4 EUR-Lex (Publications Office of the European Union) · 5 U.S. Government Publishing Office · 6 U.S. Government Publishing Office
High-Demand Defense Tech Skills
Cyber Defense & Sovereign Systems
Thales Cybels and Atos' defense division need:
- Offensive security: Penetration testing, red teaming, vulnerability research: OSCP and OSCE certifications valued
- Cryptography: Post-quantum cryptography implementation, HSM management, key infrastructure: critical for sovereign communications
- SIEM/SOC operations: Security operations center management, threat hunting, incident response
- Secure software development: CC (Common Criteria) evaluation, secure coding practices, SDLC for classified systems
Defense AI & Autonomous Systems
- Computer vision: Target recognition, terrain mapping, satellite imagery analysis using deep learning
- Sensor fusion: Combining radar, EO/IR, and SIGINT data streams: FCAS's core technical challenge
- Autonomous navigation: Path planning and decision-making for UAVs, UUVs, and autonomous ground vehicles
- Explainable AI: Military applications require AI decisions that can be audited and explained to commanders
Missile & Space Systems
MBDA (Europe's missile champion) and ArianeGroup need:
- Guidance, navigation & control (GNC): Kalman filtering, inertial navigation, terminal guidance algorithms
- Propulsion engineering: Solid and liquid rocket motor design, ramjet/scramjet for hypersonic systems
- Systems engineering: V-model development, requirements management (DOORS), and integration testing for complex weapon systems
What this dossier will not price
This section used to carry a table of pay bands by role and seniority. It cited no document, and no dated document this desk could open prints such bands for the French defence sector. The bands are withdrawn rather than re-sourced, and the six withdrawn values are listed in the revision history at the end of this dossier.
What would put a band back here is specific and checkable: a dated publication, from a ministry, a sector body or a listed employer, printing remuneration by post and seniority, and comparing cleared with uncleared holders of the same post. Until such a series exists, the decision this dossier can actually inform is the one the instruments govern: which posts a candidate is eligible for, in what sequence, and what evidence of classification literacy and configuration discipline they can show before an employer sponsors anything.
Building Your Defense Tech Resume
What Recruiters Look For
- Discretion signals: Demonstrate you understand classified information handling without revealing specifics from past roles
- Systems thinking: Defense projects are inherently multi-disciplinary: show you can work across domains
- Compliance awareness: Mention export control training, security awareness certifications, and relevant regulations
- Longevity: Defense hiring is expensive due to clearance costs: companies prefer candidates who signal long-term commitment
Sources
- NATO. “Defence Expenditure of NATO Countries (2014–2025).”
- SGDSN (October 2021). “Fiches pratiques; protection du secret de la défense nationale : les personnes habilitées.”
- SGDSN (9 August 2021). “Instruction générale interministérielle n° 1300.”
Why a defence CV is read differently
A defence-sector recruiter reads a CV looking for eligibility before capability, because a candidate who cannot be granted access to the programme cannot be hired into it regardless of talent. That reverses the usual document logic. Three questions are answered in the first fifteen seconds: can this person be cleared, has this person worked under configuration control, and can this person show impact without disclosing anything they should not.
The last point is where strong candidates most often damage themselves in both directions. Some over-disclose (naming a classified programme, a customer or a capability) which reads as a discipline failure and ends the application. Others under-disclose to the point of invisibility, describing two years of work as "supported various projects". The professional standard is to describe scope, method and measurable outcome at an unclassified level: the class of system, the engineering discipline, the standard applied, the result in schedule or quality terms.
Clearance, ITAR and export control, in plain terms
Two distinct control systems shape who may do what, and candidates routinely conflate them.
Security clearance governs access to classified national information. It is attached to a post rather than owned by a person, requires a formal investigation that takes months, and generally presupposes eligibility conditions including nationality. Practical consequence: apply early, expect the timeline, and never assume a clearance transfers automatically between employers or countries.
Export control (ITAR and EAR in the United States, EU and national dual-use regimes in Europe) governs the transfer of controlled technology and technical data, including to foreign nationals inside your own office. This is why a role may be closed to an otherwise qualified engineer, and why programmes maintain segregated environments and access matrices. Candidates who can speak fluently about technical-data handling, deemed exports and licence conditions are visibly less risky to hire.
For European candidates the strategic reading is that ITAR-free architecture has become a commercial argument in its own right. Engineers who understand where a controlled component creates dependency, and how a design avoids it, are contributing to sovereignty rather than merely to compliance.
The five signals that move a defence application forward
- Evidence of process rigour. Named standards you have worked to, and what changed in your behaviour because of them.
- Systems-engineering vocabulary. Requirements traceability, verification and validation, interface control. Its absence marks a candidate as needing retraining on arrival.
- Documented handling discipline. Any concrete example of marking, storing or restricting technical data correctly.
- Long-cycle patience. Programmes run for decades; recruiters look for candidates who finish rather than candidates who launch.
- Clean, verifiable background. Consistent dates, no unexplained gaps, and honesty about anything the investigation will surface anyway. Concealment is the most common self-inflicted disqualification.
A sequenced plan for entering the sector
- Target the supply chain, not only the primes. Tier-one and tier-two suppliers hire in larger relative volume, clear faster, and give a candidate the traceability experience the primes screen for.
- Build one unclassified artefact. A requirements-to-verification matrix for a modest system of your own design demonstrates the exact competency the sector cannot teach quickly.
- Learn the export-control basics before interviewing. One page on what constitutes controlled technical data and what a deemed export is, in your own words, changes how a hiring manager categorises you.
- Plan a two-track search. Because clearance timelines are long, run a parallel adjacent-sector search in aerospace, rail or industrial safety, so waiting does not become unemployment.
The candidates who succeed here treat access rules as part of the engineering environment rather than as bureaucracy imposed on it, and they write CVs that prove capability without ever giving a reviewer a reason to worry about what they might say next.
Withdrawn figures
On 9 September 2026 this page was audited against its own reference list, document by document. The withdrawn figures are France's EUR 413bn 2024–2030 military programming law total, Germany's EUR 100bn Zeitenwende fund, the 2–4 / 4–8 / 6–18 month investigation ranges, the 3–6 month NATO/EU vetting delay, the ten-year background-check window, and the 10–15% defence pay discount attributed to a recruitment survey. The clearance ladder itself was corrected: since the 2021 reform of the IGI 1300, French national-defence secrecy has two levels, Secret and Très Secret, not three. No primary document published by a named body could be found printing them at an edition a reader can open, so they have been withdrawn rather than left standing on a reference nobody can check. Every figure that remains above is credited in its own sentence to a document a reader can open at a stated edition.