Vulnerability Assessment Engineer 3

ul /brliThe contracted individual will be asked to support the development of one or more technical deliverables. /li /brliThe contracted individual must be able to perform effectively and efficiently with minimal supervision. /li /brliFrequent travel to NATO and national (NATO and non-NATO) facilities is required in support of assessments. /li /brliThe duties are normally performed within government or military installations, where security protocols and operational requirements prevail. /li /brliThe position is based on-site, with very limited opportunities for teleworking. /li /brliThe duties of the individual mainly focus on: /li /brliPlan and execute technical On-site CIS Security Audits (Type-3) for networks, systems, and applications, and ensure the accuracy of the results; /li /brliAnalyse collected assessment data and identify security weaknesses; /li /brliWrite Security Audit reports with findings and appropriate recommendations; /li /brliProvide briefings and further information to support remediation and mitigation; /li /brliContribute to development of in-house toolset for data collection and analysis; /li /brliPerforms other duties as may be required. /li /br /ul /brh3bSkill, Knowledge

Experience:
/b /h3 /brul /brliThe required skillset for the contracted individual is extensive knowledge and experience (more than 3 years – except AI) in the following areas: /li /brliProven, in depth understanding of computer and communications security, enterprise networking, and the vulnerabilities inherent in modern operating systems and applications; /li /brliAbility to assess a variety of security controls aligned with industry best practices, including Zero Trust Architecture and Data Centric Security principles; /li /brliExpert knowledge in executing vulnerability assessment scans across large, complex networks without impacting system availability or performance; /li /brliDemonstrable hands on experience with Tenable Nessus products, including advanced configuration and customization; /li /brliExtensive proficiency in developing and deploying Nessus audit files to enforce compliance checks for operating systems, network devices, and applications; /li /brliThorough understanding of Active Directory security configuration and associated vulnerabilities; /li /brliAdvanced knowledge of Microsoft Azure AD / Entra ID / Office 365 and AWS Cloud Security, with practical experience in securing hybrid and cloud environments; /li /brliFamiliarity with DevSecOps practices, embedding security into CI/CD pipelines and cloud native deployments; /li /brliComprehensive experience in assessing and implementing system hardening measures, antimalware configurations, and endpoint protection strategies; /li /brliAbility to benchmark systems against recognized security standards (e.g., CIS Benchmarks, NIST); /li /brliApplied expertise in Artificial Intelligence, including the capability to assess Large Language Models (LLMs); /li /brliProficiency in implementing and securing Ansible deployments; /li /brliExpertise with Software Defined Networking (SDN) and Service Oriented Architecture (SOA) implementations; /li /brliCapability to integrate modern architectures with enterprise security frameworks; /li /brliEnhanced skillset in data processing automation using scripting languages (e.g. PowerShell, Python, Bash); /li /brliAbility to build repeatable workflows/checklists to improve efficiency and reduce human error; /li /brliExcellent communication skills, including briefing senior stakeholders, delivering clear presentations, producing high quality reports, and mediating technical discussions; /li /brliStrong interpersonal abilities with a proven track record of working independently and collaboratively within multidisciplinary teams; /li /br /ul