Would you like to join the leading international intergovernmental organization? This is a comprehensive cyber security engineering role encompassing solution architecture, security engineering, information security, information assurance, and requirements management. The position requires a professional with extensive knowledge of security monitoring, PKI, vulnerability management, and identity and access management, alongside deep technical expertise in system and network security with a particular focus on Zero-Trust and Data-Centric architectures.

De Rol

Contributes to the development of security policy-compliant architectures in AirC2 and related mission-support areas. Determines and documents architecturally significant decisions. Produces specifications of cloud-based or on-premises components, tiers and interfaces, for translation into detailed designs using selected services and products. Supports projects or change initiatives through the preparation of technical plans and application of design principles. Aligns solutions with enterprise and solution architecture standards (including security).

Verantwoordelijkheden

• Supports the configuration, testing and trouble-shooting of security products and services within the C2SS supported products and services.
• Integration of local security services with centralized security infrastructure.
• Applies and maintains specific security controls as required by organisational policy and local risk assessments.
• Communicates security risks and issues to business managers and others.
• Contributes to the identification of risks that arise from potential technical solution architectures.
• Suggests alternate solutions or countermeasures to mitigate risks.
• Defines secure systems configurations in compliance with intended architectures.
• Supports investigation of suspected attacks and security breaches.
• Follows standard approaches for the technical assessment of information systems against information assurance policies and business objectives.
• Supports routine accreditation advice.
• Reviews and performs risk assessments and risk treatment plans.
• Defines and manages scoping, requirements definition and prioritisation activities for small-scale changes and assists with more complex change initiatives.

Vereisten

Essentiële Kwalificaties & Ervaring:

• Bachelor of Science (BSc) degree at a nationally recognised/certified university in a technical subject with substantial Information Technology (IT) content and 3 years post-related experience. Alternatively, at least 5 years of extensive and progressive experience in the duties related to the functions of this post.
• Extensive knowledge and experience (at least 3 years) in security monitoring, PKI, vulnerability management, identity and access management.
• Researching and evaluating security products & technologies.
• Knowledge in system and network administration of UNIX and Windows systems.
• Technical knowledge in system and network security, with a particular focus on Zero-Trust and Data-Centric architectures.
• Proven ability to write clear and structured technical reports (in English) including executive summary, technical findings and remediation plan for several different audiences.

Gewenst:

• Prior experience of working in an international environment comprising both military and civilian elements.
• Knowledge of NATO organization, internal structure and resultant relationships.

If you've read the description and feel this role is a great match, we'd love to hear from you! Click "Apply for this job" to be directed to a brief questionnaire. It should only take a few moments to complete, and we'll be in touch promptly if your experience aligns with our needs.