[6380] Adversary Emulation Tool Management Support Service

Start date: Negotiable
Clearance: NATO Secret
Location: Mons, Belgium

Duties & Role:
• Under the direction and guidance of the NCSC Point of Contact, the contractor will form part of the NCSC Team and support the following activities:
• Install, configure and update Linux operating systems.
• Manage user accounts, permissions and security settings.
• Configure network services, including DNS, DHCP, NFS and SSH.
• Proactively review logs and alerts to identify technical issues, errors or failures within the monitoring process.
• Produce and distribute reports covering system health, monitoring activities and compliance status, including audit logs and system performance metrics.
• Daily: Verify system health, including CPU, memory and disk usage, and resolve issues where required to maintain system availability.
• Daily: Review system logs for errors, anomalies and abnormal behaviour.
• Daily: Respond promptly to outages, system alerts and technical issues.
• Daily: Monitor ITSM systems and take appropriate action on requests, changes and incidents.
• Document system configurations and changes, including integration steps, troubleshooting procedures and system maintenance activities.
• Maintain an up-to-date inventory of integrated identity sources, IAM systems and external tools.
• Weekly: Perform system maintenance, including scheduling and applying updates and checking system resources.
• Weekly: Test backup restores periodically to ensure data integrity.
• Weekly: Identify and resolve performance bottlenecks and capacity issues.
• Identify opportunities for automation to reduce manual intervention and improve system efficiency and operational effectiveness.
• Monthly: Analyse trends in resource usage and plan for future upgrades or capacity requirements.
• Monthly: Ensure service levels are being met and report relevant information to stakeholders.
• Monthly: Verify and update hardware and software inventories.

Requirements:
• The contractor will support the lifecycle management of the Adversary Emulation software, including tasks related to A2SL inclusion, configuration to ensure coverage of Adversary Emulation targets, and regular monitoring of capability availability.
• The successful candidate will act as a Tool Management SME and must have strong spoken and written English skills.
• Currently active NATO COSMIC TOP SECRET security clearance.
• Bachelor's degree in Computer Science, Information Technology or a related field, or at least 6 years of relevant experience.
• Minimum 3 years of relevant experience in IT security, with a focus on system administration and security tools management within large organisations.
• Proven relevant experience in:
• Linux systems administration, including installation, configuration and maintenance of Linux-based servers, system updates and patches, performance and log monitoring, and management of users, permissions and platform settings.
• Docker management, including maintaining Docker containers and troubleshooting Docker-based applications and volumes.
• Strong understanding of security best practices.
• IP switching and routing, including experience with network troubleshooting.
• Virtual infrastructure, particularly environments based on VMware technologies.
• Programming and/or scripting, including Python, Shell scripting and/or PowerShell.
• Analysing and interpreting logs to diagnose faults and identify abnormal behaviour.
• Proxy management, including configuration, maintenance, routing rules and access controls.
• NATO organisation and its IT infrastructure.
• Service management, monitoring and reporting tools, such as SolarWinds.
• ITIL Service Management.
• System instrumentation and automation solutions, such as Ansible.
• Working within an international environment comprising both military and civilian personnel.
• Certifications such as CISSP, CISM or CISA, or equivalent.