[6108] Senior Engineer (Cyber Security)

Start date: Negotiable
Clearance: NATO COSMIC TOP Secret or equivalent
Location: The Hague (40% onsite, 60% WFH)

Duties & Role:

Oversight and support to Information Security and NATO CIS Security Accreditation activities. This includes provision of relevant expertise, direct support to specific projects and the conduct of security risk assessments. Specific duties include:

• Project Support: security design, CIS Security Risk Assessment, security requirements, security testing and validation, interoperability and security operating procedures;
• Information security: advise on security aspects to manage identified risks and ensure adoption and adherence to standards for complex ISR information systems. Develop security architectures that mitigate the risks;
• Information assurance: Interpret and apply information assurance and security policies to manage risks. Plan and conduct information assurance and security accreditation of complex cross- functional domains and areas, cross-functional areas;
• Risk management: Plan and implement complex security risk management activities within a specific function, technical area, project or programme. Implement consistent and reliable security risk management processes and reporting to key stakeholders.
• Vulnerability assessment/ Penetration Testing: Plan and manage vulnerability assessment and/or penetration testing activities.


Skill, Knowledge & Experience:

• The candidate must have a currently active NATO COSMIC TOP SECRET security clearance
• A minimum of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience. Exceptionally, the lack of a university degree may be compensated by the demonstration of 10 years particular abilities or experience of interest to NCIA.
• A professional Qualification CIS Security e.g. CompTIA Security+/ CISM/ ISC2 - CISSP, and/or equivalent certification);
• Risk Management certification or equivalent
• Knowledge of NATO or national processes for ATO.
• Experience with PILAR or (RMF) risk management framework.
• Knowledge of common IT security frameworks and governance models.
• Knowledge of NATO responsibilities and organization to include NATO Security Policy and supporting directives.
• Knowledge of NATO responsibilities and organization, including ACO