BICES-0001 Cybersecurity Technician (CTS) - THU 15 Oct

EMW; Brussel Hoofdstad; Hybride; EUR 70 000 - 110 000; Plein temps

Résumé du poste

EMW, Brussels-based contractor, supports NATO HQ with 2nd level cybersecurity responsibilities focused on CIS monitoring, incident response, and security posture assessments at the BSU. The role involves on-site work in Brussels, collaboration with BGX Officers and Engineers, and potential travel under NATO rules.

The incumbent will work within a secure facility environment, applying experience in security tools, networks, and SOC processes, and must hold NATO COSMIC TOP SECRET clearance.

Qualifications

• At least 3 years post-related experience in CIS security activities.
• At least 1 year experience with Windows and Linux OS and update platforms.
• Experience with firewall and intrusion detection technologies.
• Experience with security tools such as firewalls, proxies, guard technology, SIEM and scanning tools.
• Experience in SOC processes and procedures; vulnerability assessment and pentesting knowledge.
• Strong written and spoken English; able to communicate clearly.

Responsabilités

• Provide 2nd level cybersecurity support for CIS monitoring and incident response.
• Document security posture findings; monitor and improve security services.
• Potential deployments and travel within NATO for duty assignments.

Connaissances

CIS security monitoring

Anomaly identification

SOC processes

Communication

Advanced English

Formation

Higher secondary education

Outils

Firewalls

Proxies

Guard technology

SIEM

Scanning tools

IP networking devices

Description du poste

Deadline Date: Thursday 15 October 2026

Requirement: Cybersecurity Technician

Location: Brussels, BE

Full Time On-Site: Yes

Total Scope of the request (hours): 1672

Period of Performance: 2027 BASE period: 4th January 2027 until 31st December 2027

2028 OPTION period: Possibility to exercise this option from 1st January 2028 until 31st December 2028.

Required Security Clearance: NATO COSMIC TOP SECRET

Special Terms and Conditions: The contractor will be responsible for complying with the respective national requirements for working permits, visas, taxes, social security etc. whilst working on site at NATO HQ Brussels, Belgium. No special status is either conferred or implied by the host organisation, NATO HQ Brussels, Belgium to the contractor whilst working on site.

1. INTRODUCTION

The BICES (Battlefield Information Collection and Exploitation Systems) is an association of independent elements to enable the sharing and exchange of timely intelligence-related information between all NATO member nations, associated partner nations and the NATO organization. BICES capabilities are intended for national, NATO or coalition use, during peace, crisis and war, supporting decision-makers, deployed force commanders and tactical users. The BICES Group Executive (BGX) works as a facilitator maintaining the core network and coordinating the community-wide provision of capabilities and services operated at national/organisational level. BICES offers a number of services to support BICES users using mainly commercial off-the-shelf (COTS), open source but also an in-house developed software.

Within BGX, the BICES Support Unit (BSU) is responsible for managing the BICES services across the BICES NATO HQ Element that includes the following CIS functional areas by providing daily operational support: BGX Service Desk, Networking/Communications, Secure Voice & Video telecommunications platforms and Systems/Applications services, SharePoint, Call Manager support. Additionally, the BSU provides general maintenance functions, and quality assurance, and manages customer feedback. The BSU provides support related to IT Incidents, problems and service requests to the BICES NATO HQ Element users. The purpose of this Statement of Work (SOW) is to engage external contractor to staff the BSU.

2. JOB DESCRIPTION

Under the supervision of the BSU Chief and in close coordination with the BGX Security Officers and Engineers, the incumbent provides 2nd level support for complex technical cybersecurity-based activities in the area of CIS monitoring and security incident response. S/He contributes to the day-to-day CIS security testing, verifications, scanning, monitoring, updating, baselining, improving and documenting activities of the cybersecurity capabilities implemented within the BICES NATO HQ Element networks. The incumbent reports the status and the discoveries of the security posture of BICES NATO HQ Element networks and contributes to the monitoring, analysis and modifications of security services. The incumbent may be required to undertake operational deployments and/or travel duty assignments both within and beyond NATO's boundaries. The work is performed in a typical Secure Facility environment where slightly undesirable conditions may apply. The risk of injury is categorized as: Light Risk of Injury.

3. LOCATION OF DUTY

The location of duty is on-site at the NATO HQ offices in Brussels, Belgium.

4. TIMELINES

The base period of performance is 4th January 2027 to 31st December. If the 2028 option is exercised, the period of performance is 1 January 2028 to 31 December 2028.

5. TRAVEL

Occasional business travel may be required. Travel expenses will be reimbursed to the individual directly (in addition to the hourly rate) under NATO rules.

6. SECURITY AND NON-DISCLOSURE AGREEMENT

The contractor must be in possession of a NATO COSMIC TOP SECRET security clearance.

A signed Non-Disclosure Agreement will be required as per Annex C.

QUALIFICATIONS AND EXPERIENCE

Essential

The incumbent must:

• Possess higher secondary education with at least 3 years post related experience and possess at least 1 year post-related experience in CIS security activities;
• Possess at least 1 year of experience in Windows and Linux based operating systems and platforms, of update service platforms and technologies and of IP based networking and devices;
• Possess at least 1 year of experience in firewall and intrusion detection technologies;
• Demonstrate the ability to identify and describe computer and network anomalies within a CIS and to understand, assess and solve technical issues;
• Possess at least 1 year of experience in security tools such as firewalls, proxies, guard technology, SIEM solutions and scanning tools;
• Possess at least 1 year of experience in Security Operations Centre (SOC) processes and procedures;
• Possess at least 1 year of experience invulnerability assessment and penetration testing techniques, log fusion and log analysis capabilities;
• Be able to communicate effectively orally and in writing;
• Be flexible to work outside regular office hours;
• Possess level V (Advanced) of the English language.

Desirable

The following will be considered an advantage:

• Knowledge of NATO security policies and supporting directives;
• Experience working in a multinational environment;
• Familiarity with NATO structure and procedures;
• Experience with the application of techniques/methods for source verification, data fusion, quality analysis, and threat actor profiling.

SECURITY AND NON-DISCLOSURE AGREEMENT

• The contractor must be in possession of a NATO COSMIC TOP SECRET security clearance.