Network Security Tool Manager

h3Duties /h3 ul liDeliver and maintain the network visibility and security monitoring capabilities required to support CSOC operations. /li liAct as a subject matter expert for the operation, configuration, and lifecycle management of security monitoring and packet capture technologies. /li liManage the lifecycle of security monitoring platforms, including deployment, configuration, maintenance, upgrades, obsolescence management, and decommissioning. /li liConfigure, maintain, and optimize monitoring, traffic aggregation, and packet capture technologies to support reliable data collection and analysis. /li liMonitor platform health, availability, data quality, retention, storage utilization, and operational performance. /li liIdentify and address visibility gaps that may impact threat detection or security operations. /li liMaintain accurate documentation, architecture diagrams, inventories, operational procedures, and support information. /li liTroubleshoot Linux, network, connectivity, performance, and data collection issues across the security monitoring environment. /li liSupport the design and implementation of security monitoring solutions that align with CSOC requirements. /li liSupport integration with wider security operations, analytics, and incident management capabilities. /li liWork with security analysts, detection engineering, and other stakeholders to improve monitoring coverage and support evolving detection requirements. /li liConduct capacity planning and scalability assessments to support future growth. /li liIdentify operational risks, improvement opportunities, and enhancements to increase reliability, visibility, and efficiency. /li liSupport compliance, audit, and assurance activities related to cyber defense technologies. /li liProvide subject matter expertise and technical guidance on security monitoring, network visibility, packet capture, and data collection requirements. /li liSupport projects and initiatives by ensuring monitoring and visibility requirements are considered during design, implementation, and service transition. /li liSupport cabling, deployment planning, and site survey activities related to security monitoring and network visibility infrastructure. /li liCoordinate maintenance activities, vendor support engagements, and communications relating to platform status, risks, and improvement opportunities. /li liIf requested, participate in cyber defence related exercises supported by NCIA. /li liSupport the Defend Branch service delivery in the context of NCIA Enterprise Service Delivery Model and NCIA Customer Funded regime. /li liDeputize for higher grade staff, if required. /li liPerforms other duties as may be required. /li /ul h3Requirement /h3 ul liA minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 2 years post-related experience. /li liOr exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCI Agency, that is, at least 6 years extensive and progressive expertise in duties related to the function of the post. /li liExpert knowledge of network security monitoring, cyber defense operations, and enterprise security monitoring environments. /li liExtensive hands-on experience supporting large-scale, distributed security monitoring deployments across multiple networks, sites, segments, or data centres. /li liHands-on enterprise experience with security monitoring and packet capture platforms such as Cisco Firepower, Corelight, and NetWitness. /li liProven experience in platform health monitoring, performance monitoring, capacity management, troubleshooting, and operational governance. /li liStrong hands-on experience with network visibility, traffic aggregation, packet brokers, packet capture, and related monitoring technologies. /li liAdvanced understanding of enterprise networking concepts, protocols, architectures, and data flows. /li liLinux and network troubleshooting experience, including connectivity, packet flow, interface, performance, and system-level diagnostics. /li liPractical experience supporting cabling, site surveys, and physical deployment activities for monitoring or network visibility infrastructure. /li liStrong knowledge of security telemetry collection, event correlation, threat detection, and threat hunting concepts. /li liVery good communication and analytical skills. /li liLanguage proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency". /li liRelevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security. /li liA minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 2 years post-related experience; /li liOr exceptionally, the lack of a universit