IS-59 Senior Cyber Security Engineer
JOB DETAIL
- General Qualifications
- University degree (preferably in computer sciences with a specialisation in information security) or equivalent experience.
- Demonstrated organisational and project management abilities to successfully work as a member or leader of multi-national/multi-disciplinary teams (including consultants), dealing with complex, interrelated technical issues.
- Excellent interpersonal, communication, analytical and financial/budget skills, which bridge the gap between technology and business.
- Ability to work independently, to be self-motivated, to work under stress and to tight deadlines.
- Ability to maintain technological watch in order to propose continuous innovation.
- Very good understanding of the underlying concepts of IS/IT production.
- In-depth knowledge of ICT security and network concepts, policies and procedures, and large experience in developing, implementing, managing and maintaining ICT security and network.
- In-depth experience in designing, implementing and managing Firewall based architecture in a very compartmentalised network environment with Intrusion Prevention Systems (IPS); the knowledge of the Palo Alto product would be an asset.
- Excellent understanding of complex and interrelated ICT security issues, including monitoring, troubleshooting and security incident/intrusion handling; the knowledge and use of a SIEM product would an asset (e.g. Arcsight, Splunk).
- At least five years of proven experience in the information systems security field; of which, at least three years in a heterogeneous, complex environment with UNIX systems, Windows servers and security appliances.
- Knowledge of digital forensics and malware analysis tools, techniques and procedures.
- Knowledge of the latest web technologies, including but not limited to: Hyper Text Markup Language (HTML), JavaScript, Extensible Markup Language (XML), Representational State Transfer (REST), Simple Object Access Protocol (SOAP) Application Programming Interface (API) and Progressive Web Apps (PWA). IS-53, 59 NATO UNCLASSIFIED FILE 2024
- Hands-on experience establishing and configuring security controls for cloud infrastructure and Microsoft 365.
- Hands-on experience with container security.
- Hands-on experience with encryption technologies and key management.
- Broad technical background in the area of IT infrastructure and applications [including networking, Internet technology, security proxies for web, mail and file transfer, system analysis and design methods].
- Excellent understanding of web and SAP application vulnerabilities and knowledge of common application security frameworks (e.g.: OWASP Top 10, OWASP Testing Guide).
- Proven experience in performing intrusion testing of web applications and identifying application security requirements and security controls.
- Good knowledge of Public Key Infrastructure (PKI) concept and implementation, RSA and of authentication protocols [Kerberos, SAML, Single-Sign-On (SSO)].
- A recognised project management certification [e.g. PRINCE 2™ Practitioner, Project Management Professional (PMP)].
- Very good analytical skills.
- NATO’s two official languages are English and French. The work of this post is mainly conducted in English, therefore fluency in that language is essential and working knowledge of French is desirable
WHAT DO WE OFFER?
- Multicultural environment
- Initial three year contract with competitive monthly tax-free salary (subject to Article 19 of the Ottawa agreement on exemption of Taxation)
- Additional benefits for expatriate staff including expatriation and education allowances (where applicable) and additional home leave
- Excellent health coverage
- Great work/life balance
- Generous annual leave of 30 days plus official holidays
- Pension Scheme
POST DETAILS
- Basic monthly salary: EUR9 083,62, tax free.
HOW TO APPLY?
All candidates (internal and external) should refer to the FAQs before applying.
NSPA internal candidates must submit additionally their latest completed performance report.
NSPA staff members of the same grade can submit a transfer request till 10 July 2024.
Applications sent via e-mail will be automatically rejected.
IMPORTANT NOTES
Qualified redundant NATO civilian candidates of the same grade will be considered in priority.
Interviews are expected to be held approximately six weeks after the application closing date. The Talent Acquisition and Development Office shall let you know in due course the outcome of the screening process.
Moreover, due to the broad interest in NSPA and the large number of potential candidates, telephone or email enquiries cannot be dealt with.
The Agency would appreciate it if addressee countries could provide their support by submitting candidates whose security clearance can be effected (or confirmed) rapidly and who could report for duty as soon as possible after selection.
NSPA COVID MEASURES:
All deployable vacancy announcements include the requirement to be fully vaccinated at the time of receiving the offer of employment. No offer of employment shall be made to deployable candidates who refuse to be vaccinated.
IMPORTANT NOTE:
Your application should be submitted in one go and you will not be able to modify your data once submitted.
