CDT-0030 - Expert on Defensive Cyberspace Operations Management BELGIUM (contract)

Job description:

Deadline Date: Wednesday 18 November 2026
Requirement: Expert on Defensive Cyberspace Operations Management DSO
Location: Mons, BELGIUM
Full Time On-Site: Yes
Not to Exceed Rate:78 EUR
Total Scope of the request (hours): 1672 hrs (Estimate)
Required Start Date: 4 January 2027
End Contract Date: 31 December 2027
Required Security Clearance: NATO SECRET
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:

Current National or NATO SECRET clearanceNationality of one of the NATO member countriesCurrent work visa for the specific location if applying for an in-country position

Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted.

Introduction
The NATO Cyber and Digital Transformation (CDT) Division brings Information and Communications Technology (ICT) coherence across NATO Enterprise's civil and military bodies. CDT is empowered to realize the Allies' vision for the NATO Enterprise, is accountable to the Secretary General and is responsible for the development of Enterprise directives and advice on the acquisition and use of information technologies and services.
CDT also provides Enterprise oversight on cybersecurity issues, and, in close coordination with all relevant NATO civil and military bodies, works towards the continual improvement of the cyber hygiene and cybersecurity posture in the NATO Enterprise.
CDT is an integrated staff organization comprised of International Staff (IS) and International Military Staff (IMS) members.
CDT supports the planning, coordination and execution of Defensive Cyberspace Operations (DCO) in NATO networks, as one of the leading members of the DCO Planning and Coordination Cell (DPCC).
The incumbent will be responsible for ensuring appropriate coordination amongst the DPCC members (i.e. NATO Cyberspace Operations Centre (CyOC), Joint Intelligence and Security Division (JISD), NATO Communications and Information Agency (NCIA) and CDT). S/He will also be responsible for managing the complete lifecycle of DCOs led by the CDT, including the planning, conduct, assessment, and follow-up phases.
The incumbent must demonstrate in-depth knowledge of advanced technical operations in defence of communication and information systems, but also good knowledge in cyber incident management and cyber risk management best practices and processes.

Tasks
The contractor will effectively and efficiently provide, with minimal support, the following services:

• Plan, coordinate and oversee advanced technical DCO, incorporating activities such as threat hunting activities, adversary emulation and deception technologies;
• Draft clear and concise technical and non-technical reports;
• Working with NATO SMEs, develop relevant red and blue pictures in support of developing DCO plans;
• Develop DCO plans, supporting processes and procedures;
• Develop effective and actionable remediation plans based on lessons identified captured through DCO execution;
• Prepare and deliver presentations to technical and non-technical audiences, in order to facilitate consensus building and decision-making;
• Coordinate the work of the DPCC, ensuring appropriate communication and cooperation amongst the relevant NATO Enterprise stakeholders;
• Support the DPCC meetings, in working level and principals level format, facilitating discussions, leading CDT initiatives and providing advice during the DCO lifecycle;
• Liaise with CyOC, NCIA and other stakeholders for the planning and coordination of any cyberspace activities in the context of DCOs;
• Support the NATO Enterprise Incident Manager in the coordination and assessment of cybersecurity incident response activities in relation to ongoing DCOs;
• Support the risk management and decision making processes, coordinating with the NATO Cyber Risk Management Group (CRMG) and the NATO Board of CISOA

RequirementsProfile

• The contractor must have more than 2 years of direct experience in defensive cyberspace operations focusing on the planning and conducting operations in military focused environments encompassing activities such as advanced technical operations, incident response, threat hunting, adversary emulation, etc.
• The contractor must have a minimum of 3 years proven project management experience working with different organizations within a federated environment in the coordination of planning, execution and technical remediation activities;
• The contractor must have excellent communication and negotiation skills;
• The contractor must have