[6463] Senior Cyber Security Engineer

Start date: Negotiable Clearance Required: NATO Secret

Location:
Mons, Belgium Requirements
- Currently active NATO SECRET security clearance.
- Bachelor's degree from a nationally recognised or certified university in a related discipline, with at least 3 years of post-related experience.
- Alternatively, candidates without a university degree may qualify through at least 10 years of extensive and progressive experience in duties relevant to the Statement of Work, demonstrating particular abilities of interest to NCIA.
- At least 3 years of practical experience developing or delivering cybersecurity services.
- Extensive practical experience identifying vulnerabilities and potential security threats.
- Experience developing technical requirements, system diagrams and other engineering products supporting cybersecurity acquisition and procurement.
- Proven ability to deliver cybersecurity capabilities for industry, government or military organisations.
- Up-to-date knowledge and experience in designing and implementing cybersecurity capabilities and supporting infrastructure in operational environments.
- Up-to-date knowledge and experience of cryptographic technologies, including key management.
- Up-to-date knowledge and experience of identity and access management.
- Up-to-date knowledge and experience of risk management.
- Knowledge of network monitoring and detection technologies.
- Knowledge of designing cybersecurity capabilities on cloud infrastructure.
- Ability to apply architecture methodologies to represent complex systems of systems through architectural models at varying levels of detail.
- Proven ability to manage stakeholders, understand their needs and propose constructive solutions.
- Proactive approach to building and maintaining stakeholder trust.
- Strong oral and written communication skills, including briefing skills.
- Experience leading small teams.
- Very good communication and analytical skills.
- English proficiency meeting or exceeding NATO STANAG 6001 Level 3 (Professional Proficiency).
- Proficiency in the ArchiMate modelling language.
- Relevant cybersecurity certifications, such as CISM, CISSP or GIAC. Desirable

Experience:
- Experience working for or supporting a military or governmental organisation. Duties and Role:
- Contribute to the development of solution architectures across specific business, infrastructure and functional areas.
- Identify and evaluate alternative architectures, assessing trade-offs involving cost, performance and scalability.
- Determine and document architecturally significant decisions.
- Produce specifications for cloud-based and on-premises components, tiers and interfaces for translation into detailed designs.
- Support projects and change initiatives by preparing technical plans and applying design principles.
- Ensure solutions align with enterprise and solution architecture standards, including security requirements.
- Provide guidance on applying and operating physical, procedural and technical security controls.
- Explain security controls and conduct security risk and business impact analyses for medium-complexity information systems.
- Identify risks arising from proposed technical solution architectures and design alternative solutions or countermeasures to mitigate them.
- Investigate suspected attacks and support security incident management.
- Define and manage scoping, requirements definition and prioritisation for medium-sized and moderately complex initiatives.
- Contribute to selecting requirements approaches, facilitate stakeholder input and support effective prioritisation.
- Establish requirements baselines, obtain formal agreement and maintain traceability to source requirements.
- Select appropriate techniques and tools to develop user stories and elicit user experience requirements in complex situations.
- Identify design goals and stakeholder groups for systems, products, services and devices.
- Resolve conflicts between differing user requirements and define measurable usability and accessibility criteria.
- Provide cybersecurity technical expertise and leadership to engineering projects, including preparing statements of work, execution planning and procuring cybersecurity items.
- Coordinate cybersecurity delivery activities between assigned hands-on engineers within NCIA and NCSC, following the multi-layer change management framework.
- Identify and resolve problems, manage internal and external quality control, and contribute to knowledge management.
- Document project results, including post-implementation system specifications, instructions and updates to cybersecurity service documentation.
- Coordinate handover to NCSC cybersecurity services for operations and calculate operational and maintenance costs.
- Provide technical input to acquisition projects, including writing, reviewing and coordinating cybersecurity requirements, statements of work, system design specifications, high
- and low-level design blueprints and bills of materials.
- Support procurement activities by responding to questions and evaluating bids.
- Develop and present cybersecurity scientific, engineering, technical and marketing information for official meetings.
- Represent NCIA/NCSC in working groups and forums.
- Carry out tasks assigned by the Branch, NCSC Service Delivery Managers and Resource Manager. Specific Working

Conditions:
- Remote workers must provide their own IT equipment for processing public and unclassified information, including the ability to participate in video meetings using Microsoft collaboration tools.
- Remote working from another NATO country may be permitted for up to 20% of total working time, subject to prior approval from the Resource Manager and Section Head of D&I.
- Working from home within the duty location is subject to NCIA's teleworking policy and coordination with the Section Head of D&I.
- Travel to NCIA locations in Belgium, the Netherlands or other NATO countries may be required for meetings.
- Approved work-related travel expenses will be reimbursed under NATO regulations.
- Travel requests must be initiated from the contractor's designated duty station. Login and apply | Register and apply |