[6463] Senior Cyber Security Engineer

Start date: Negotiable
Clearance Required: NATO Secret
Location: Mons, Belgium

Requirements
• Currently active NATO SECRET security clearance.
• Bachelor's degree from a nationally recognised or certified university in a related discipline, with at least 3 years of post-related experience.
• Alternatively, candidates without a university degree may qualify through at least 10 years of extensive and progressive experience in duties relevant to the Statement of Work, demonstrating particular abilities of interest to NCIA.
• At least 3 years of practical experience developing or delivering cybersecurity services.
• Extensive practical experience identifying vulnerabilities and potential security threats.
• Experience developing technical requirements, system diagrams and other engineering products supporting cybersecurity acquisition and procurement.
• Proven ability to deliver cybersecurity capabilities for industry, government or military organisations.
• Up-to-date knowledge and experience in designing and implementing cybersecurity capabilities and supporting infrastructure in operational environments.
• Up-to-date knowledge and experience of cryptographic technologies, including key management.
• Up-to-date knowledge and experience of identity and access management.
• Up-to-date knowledge and experience of risk management.
• Knowledge of network monitoring and detection technologies.
• Knowledge of designing cybersecurity capabilities on cloud infrastructure.
• Ability to apply architecture methodologies to represent complex systems of systems through architectural models at varying levels of detail.
• Proven ability to manage stakeholders, understand their needs and propose constructive solutions.
• Proactive approach to building and maintaining stakeholder trust.
• Strong oral and written communication skills, including briefing skills.
• Experience leading small teams.
• Very good communication and analytical skills.
• English proficiency meeting or exceeding NATO STANAG 6001 Level 3 (Professional Proficiency).
• Proficiency in the ArchiMate modelling language.
• Relevant cybersecurity certifications, such as CISM, CISSP or GIAC.

Desirable Experience:
- Experience working for or supporting a military or governmental organisation.

Duties and Role:
• Contribute to the development of solution architectures across specific business, infrastructure and functional areas.
• Identify and evaluate alternative architectures, assessing trade-offs involving cost, performance and scalability.
• Determine and document architecturally significant decisions.
• Produce specifications for cloud-based and on-premises components, tiers and interfaces for translation into detailed designs.
• Support projects and change initiatives by preparing technical plans and applying design principles.
• Ensure solutions align with enterprise and solution architecture standards, including security requirements.
• Provide guidance on applying and operating physical, procedural and technical security controls.
• Explain security controls and conduct security risk and business impact analyses for medium-complexity information systems.
• Identify risks arising from proposed technical solution architectures and design alternative solutions or countermeasures to mitigate them.
• Investigate suspected attacks and support security incident management.
• Define and manage scoping, requirements definition and prioritisation for medium-sized and moderately complex initiatives.
• Contribute to selecting requirements approaches, facilitate stakeholder input and support effective prioritisation.
• Establish requirements baselines, obtain formal agreement and maintain traceability to source requirements.
• Select appropriate techniques and tools to develop user stories and elicit user experience requirements in complex situations.
• Identify design goals and stakeholder groups for systems, products, services and devices.
• Resolve conflicts between differing user requirements and define measurable usability and accessibility criteria.
• Provide cybersecurity technical expertise and leadership to engineering projects, including preparing statements of work, execution planning and procuring cybersecurity items.
• Coordinate cybersecurity delivery activities between assigned hands-on engineers within NCIA and NCSC, following the multi-layer change management framework.
• Identify and resolve problems, manage internal and external quality control, and contribute to knowledge management.
• Document project results, including post-implementation system specifications, instructions and updates to cybersecurity service documentation.
• Coordinate handover to NCSC cybersecurity services for operations and calculate operational and maintenance costs.
• Provide technical input to acquisition projects, including writing, reviewing and coordinating cybersecurity requirements, statements of work, system design specifications, high- and low-level design blueprints and bills of materials.
• Support procurement activities by responding to questions and evaluating bids.
• Develop and present cybersecurity scientific, engineering, technical and marketing information for official meetings.
• Represent NCIA/NCSC in working groups and forums.
• Carry out tasks assigned by the Branch, NCSC Service Delivery Managers and Resource Manager.

Specific Working Conditions:
• Remote workers must provide their own IT equipment for processing public and unclassified information, including the ability to participate in video meetings using Microsoft collaboration tools.
• Remote working from another NATO country may be permitted for up to 20% of total working time, subject to prior approval from the Resource Manager and Section Head of D&I.
• Working from home within the duty location is subject to NCIA's teleworking policy and coordination with the Section Head of D&I.
• Travel to NCIA locations in Belgium, the Netherlands or other NATO countries may be required for meetings.
• Approved work-related travel expenses will be reimbursed under NATO regulations.
• Travel requests must be initiated from the contractor's designated duty station.