• Function title: Cyber Security Expert
• Reference: NOC-NM-2023-AD/669
• Location: Brussels (The selected candidate must reside either at this location or within a reasonable proximity that allows for the satisfactory execution of their duties). – Information about living in Brussels
• Nature of competition: Internal and external competition
• Applicable regulations: Staff regulations governing officials of the EUROCONTROL Agency
• Type of post: Administrator
• Job level: AD6-AD9 – Check salary simulations for the basic grade
• Generic job title: Expert
• Number of posts: 1
• Duration of appointment: 5 Year(s) – extension or conversion of the contract is possible – see “Useful information” section
• Security clearance: EUROCONTROL, NATO or EU Secret
• Directorate/Service: NMD/TEC/SQI – Information Security, Quality, Risk & Compliance
• Working arrangement: Hybrid work (remote and onsite)
• Competition publication date: 07/09/2023
• Competition closing date: 05/10/2023 (23:59 Brussels time)
• Reserve list: Applicable – See details in the “Useful information” section

Your team

Within the Network Management Directorate, “Technology” develops and maintains NMD’s mission-critical systems, including all airspace network management operational systems, the related communications facilities and technical infrastructure. It supports the Agency’s IT solutions and services.

Your role

Your role will be to:

• Act as a cyber security expert on mission critical networks, systems and services, both on site and in the cloud; identify gaps, solutions and corrective actions, and report on findings.
• Conduct IT security risk management (i.e. risk assessment, gap analysis, identification of remediation, etc.).
• Monitor and audit the IT cyber security providers (service delivery, compliance and performance).
• Ensure efficiency of cyber security related controls and tools, and identify potential technical and procedural gaps for further development and/or enhancements.
• Conduct researches, develop and keep abreast of tools, tactics, techniques and process improvements in support of security detection and analysis in accordance with current and emerging threat and attack vectors.
• Organise and contribute to cyber security awareness and training activities.
• Participate in projects, working groups, studies, etc.
• Carry out any other task in line with the main purpose of the job.

Required qualifications, experience & competencies

• University degree of at least 4 years in a relevant field with 3 years of relevant working experience (ICT and Telecommunications, Cyber Security, etc.) Or university degree of at least 3 years in a relevant field with 4 years of relevant working experience.
• Internal candidates can check on the intranet to see what level of in-house experience is considered equivalent to educational qualifications where appropriate.
• Experience with cyber security incidents handling and response.
• Experience in scripting (python/bash/powershell/regular expressions) and automation.
• Experience or knowledge of cloud security (especially M365, Microsoft Azure and Oracle Cloud Infrastructure).
• Experience with tools used for SIEM, dashboarding, vulnerability and posture management, and forensics. Experience with Microsoft Defender and Nessus is considered an asset.
• The following would constitute an advantage:
  • IT Sec / Cybersec specializations and certifications such as CISSP, CISM.
  • Exposure to Essential 8, CIS Controls, MITRE ATT&CK, ISO 27000.
• Technical drafting skills (English).
• Analytical thinking: You analyse information and are able to identify relationships.
• Problem-solving: You anticipate and solve business problems.
• Customer focus: You adapt services to respond to customer needs.
• Creativity and innovation: You apply new approaches.
• Team work: You foster teamwork.
• Ability to work in a multinational and multicultural environment.
• Professional conduct in line with the corporate behaviours of the Agency, i.e. result-driven, readiness to change, customer focus, integrity and team-player approach.
• The working languages of the Agency are English and French. For this particular job, candidates must be proficient users of English at level C1. The selected candidate will have to acquire at least a basic knowledge of French at level A1/A2 by the end of the probation period.
  The levels relate to the European-framework-reference Common European Framework of References for languages (CEFR).

Useful information

• Applications will be accepted from nationals of EUROCONTROL Member States only.
• The selected candidate will be offered a contract of 5 Year (s) pursuant to the provisions of the Staff Regulations governing officials at EUROCONTROL. The contract may be renewed up to a maximum of 9 years or converted into an undetermined contract. Before being established in the post, the selected candidate will be requested to provide certified copies of their degrees and successfully serve a probationary period of 9 months.
• Internal candidates
  If selected, the person will keep their current type of appointment duration (undetermined or determined).
  The internal staff member with a determined contract will be offered, in principle, an appointment for 5 Year(s) with a maximum total duration of 9 years.
• The successful candidate shall be appointed at the grade set out in this vacancy notice, or if a group of grades has been published for a job level, in principle at the basic grade of the published job level.
• In case of reserve list: Suitable candidates, however not selected to fill the post, will be placed on a reserve list for similar functions. The period of validity of reserve list is 1 year from the closing date of applications .
• Information on salary and benefits can be found on our Careers site
• EUROCONTROL is an equal opportunities employer. We are committed to equality and diversity. In the event of equal merit, preference may be given to the applicant from the under-represented diversity characteristics in order to complement diversity of teams and rebalance the workforce.
• Candidates should go to our Careers site and read the tips on how to apply.