C005378 Senior Cyber Security Specialist

Deadline Date: Monday 28 September 2026

Requirement: Senior Cyber Security Specialist

Location: Mons, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 395

Required Start Date: 3 November 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Duties & Role:  

Under the direction of the Section Head of Cyber Enablement Service (CES) the contractor shall:

• Support the development, refinement and management of technical and operational requirements for cyber and CIS monitoring capabilities;
• Engage with NATO stakeholders, customers, users, technical authorities and operational representatives to solicit, analyse and document technical requirements;
• Translate operational needs into clear engineering requirements, system requirements, functional requirements and non-functional requirements;
• Develop and maintain engineering artefacts, including but not limited to: Requirements specifications; Use cases; User stories and operational scenarios; State diagrams; Workflow diagrams / WFDs; System context diagrams; Interface descriptions; Capability and service descriptions; Conceptual and logical architecture products; Testable acceptance criteria;
• Support the development of CIS capability designs, including hardware, software, network and security architecture considerations;
• Provide technical input on cyber monitoring technologies, including network monitoring, security monitoring, packet capture, sensor platforms, logging, telemetry collection, detection engineering, analytics platforms and supporting infrastructure;
• Support the identification, analysis and documentation of hardware requirements for CIS capabilities, including appliances, sensors, servers, storage, network taps, aggregation devices, packet brokers, virtualised infrastructure and supporting network components;
• Support the development of capability roadmaps, technical options papers, decision briefs and engineering recommendations;
• Support stakeholder management activities, including planning and facilitating technical workshops, requirements sessions, design reviews and coordination meetings;
• Work with customers and operational users to ensure that requirements are complete, realistic, technically feasible and aligned with NATO operational needs;
• Support the preparation of acquisition and procurement documentation, including Invitations for Bid, statements of work, technical specifications, evaluation criteria and clarification responses;
• Translate NATO technical and operational needs into language that can be understood by industry while preserving the required capability outcomes;
• Support purple team activities to validate monitoring capability effectiveness, including collaboration with red team, blue team, detection engineering and operational cyber defence stakeholders;
• Assist in identifying visibility gaps, detection opportunities and monitoring improvements based on adversary emulation, attack scenarios and operational use cases;
• Provide technical advice on cyber security architecture, monitoring architecture, system integration, tool configuration and operational improvements;
• Coordinate with project managers, system engineers, network engineers, security architects, operational teams, industry representatives and other stakeholders to ensure successful delivery of cyber capabilities;
• Support handover to operations, including knowledge transfer, training support and preparation of operational documentation;
• Participate in technical meetings, reviews, workshops and coordination activities with NATO, national and industry stakeholders;

Specific Working Conditions: If working from a remote location, the contractor shall provide IT equipment for the processing of public and unclassified information in support of their duties, including the capability to participate in video meetings using Microsoft based collaboration tools.

The contractor may be permitted to perform work remotely, from a different NATO nation than the duty location, for up to a maximum of twenty percent (20%) of their total working time, subject to prior approval by their Resource Manager (to which they will be assigned upon contract start) and the NCSC Accreditation Support Lead.

The contractor may work from their home in the duty location subject to the NCIA teleworking policy and in coordination with the NCSC Accreditation Support Lead.

Travel required: The contractor may be required to travel to NCIA locations in Belgium for in-person or department meetings. In such