Would you like to join the leading international intergovernmental organization? This is a comprehensive cyber security engineering role encompassing solution architecture, security engineering, information security, information assurance, and requirements management.

De Rol

The position requires a professional with extensive knowledge of security monitoring, PKI, vulnerability management, and identity and access management, alongside deep technical expertise in system and network security with a particular focus on Zero-Trust and Data-Centric architectures.

Verantwoordelijkheden

• Oplossingsarchitectuur:
  • Contributes to the development of security policy-compliant architectures in AirC2 and related mission-support areas.
  • Determines and documents architecturally significant decisions.
  • Produces specifications of cloud-based or on-premises components, tiers, and interfaces, for translation into detailed designs using selected services and products.
  • Supports projects or change initiatives through the preparation of technical plans and application of design principles.
  • Aligns solutions with enterprise and solution architecture standards (including security).
• Beveiligingsengineering:
  • Supports the configuration, testing, and troubleshooting of security products and services within the C2SS supported products and services.
  • Integrates local security services with centralized security infrastructure.
  • Ensures local infrastructure is configured to provide equivalent service where no integration with centralized security infrastructure is possible.
• Informatiebeveiliging:
  • Applies and maintains specific security controls as required by organizational policy and local risk assessments.
  • Communicates security risks and issues to business managers and others.
  • Contributes to the identification of risks that arise from potential technical solution architectures.
  • Suggests alternate solutions or countermeasures to mitigate risks.
  • Defines secure systems configurations in compliance with intended architectures.
  • Supports investigation of suspected attacks and security breaches.
• Informatiezekerheid:
  • Follows standard approaches for the technical assessment of information systems against information assurance policies and business objectives.
  • Supports routine accreditation advice.
  • Recognizes decisions that are beyond their scope and responsibility level and escalates accordingly.
  • Reviews and performs risk assessments and risk treatment plans.
  • Identifies typical risk indicators and explains prevention measures.
  • Maintains integrity of records to support and justify decisions.
• Vereistendefinitie en -beheer:
  • Defines and manages scoping, requirements definition, and prioritization activities for small-scale changes and assists with more complex change initiatives.
  • Follows agreed standards and applies appropriate techniques to elicit and document detailed requirements.
  • Provides constructive challenge to stakeholders as required.
  • Reviews requirements for errors and omissions.
  • Prioritizes requirements and documents traceability to source.
  • Provides input to the requirements baseline.
  • Investigates, manages, and applies authorized requests for changes to baselined requirements, in line with change management policy.

Vereisten

Essentiële Kwalificaties & Ervaring:

• Required:
  • A Bachelor of Science (BSc) degree at a nationally recognized/certified university in a technical subject with substantial Information Technology (IT) content and 3 years of post-related experience. As an exception, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that are of interest to the NCI Agency; namely, at least 5 years of extensive and progressive experience in the duties related to the functions of this post.
  • Extensive knowledge and experience (at least 3 years) in the following areas:
    • Security monitoring, PKI, vulnerability management, identity and access management.
    • Researching and evaluating security products & technologies.
    • Knowledge in system and network administration of UNIX and Windows systems.
    • Technical knowledge in system and network security, with a particular focus on Zero-Trust and Data-Centric architectures.
    • Ability to evaluate risks and formulate mitigation plans.
    • Proven ability to write clear and structured technical reports (in English) including executive summary, technical findings, and remediation plan for several different audiences.
• Desired:
  • Prior experience of working in an international environment comprising both military and civilian elements.
  • Knowledge of NATO organization, internal structure, and resultant relationships.

If you've read the description and feel this role is a great match, we'd love to hear from you! Click "Apply for this job" to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.