C005136 Application and CIS Security Senior Support Engineer (NS) - THU 3 Sep

EMW; Eigenbrakel; Hybride; EUR 65 000 - 95 000; Plein temps

Résumé du poste

EMW is seeking an Application and CIS Security Senior Support Engineer to join our hybrid team in Belgium. You will design secure-by-design architectures, run PoCs, and lead threat modelling for new or changed services.

The role covers on-premises and cloud deployments, including EntraID/identity integration, and requires NATO SECRET clearance familiarity. The candidate will support COTS applications, monitor performance, and contribute to knowledge management.

Qualifications

• Experience with Windows/Linux servers and Active Directory.
• Hands-on knowledge of SQL Server and IIS-based apps.
• Security design and architecture experience required.
• Experience with cloud platforms AWS/Azure and PKI management.
• Strong English, NATO/NCIA security awareness is a plus.

Responsabilités

• Provide COTS application support and PoCs with cost/impact analysis.
• Define secure-by-design reference architectures and baselines.
• Lead threat modelling and manage risk entries with mitigations.
• Deploy server apps on Windows or Linux and integrate with identity providers.
• Support end-user workstations and cloud components; monitor KPIs.
• Maintain security documentation and knowledge base; liaison with vendors.
• Ensure compliance with NATO/NCIA security directives in NBAC environment.

Connaissances

Windows OS

Linux

Active Directory

SQL Server

Cloud (AWS/Azure)

PKI & certificate mgmt

Security by design

AI/LLM understanding

English proficiency

Outils

IIS

JBOSS

Tomcat

.NET/C#

JAVA

REST/Web Services

Description du poste

Deadline Date: Thursday 3 September 2026

Requirement: Application and CIS Security Senior Support Engineer

Location: Braine-l'Alleud, BE

Full Time On-Site: No

Time On-Site: 50%

Total Scope of the request (hours): 592

Required Start Date: 9 October 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Duties & Role:

Main Duties

• COTS Application Support
• Design and run PoCs; produce evidence-based recommendations covering cost, operational impact, lock-in and exit strategy
• Security architecture: define secure-by-design reference architectures, patterns and hardening baselines; review new and changed service designs at architecture gates
• Threat modelling and risk: lead threat modelling for new or materially changed services; own the technical risk register entries; propose proportionate mitigations and track remediation to closure
• Support deployment of server applications running on Windows or Linux;
• Integrate applications with identity providers;
• Support creation and deployment of client applications on end- user workstations
• Gathering and reporting metrics and Key Performance Indicators (KPIs)
• Supporting in-service operations
• Support the operation of the assigned system(s) including: Systems operationally used by NATO Enterprise community; Local systems currently used by Local Commands; Atlassian Products management and configuration; Maintenance of the operational & support environments; Monitoring performance of the assigned service applications; Support CIS Support Units (CSU) and other support staff for daily operations of the systems
• Cloud Configuration (Azure, AWS)
• Manage EntraID Groups and Roles
• Manage and configure different Cloud components
• AI related activities
• Deployment, configuration and support of AI based solutions, tools and agents
• Support of COTS applications-AI integration in production environments
• Ongoing Monitoring of applications, and coordinating Maintenance
• COTS End-User Support:
• Troubleshoot and resolve complex software problems, ensuring efficient use of resources and problem resolution
• Incident Logging and Tracking:
• Monitor the incident management process for tickets created in the helpdesk ticketing system
• Ensure all tickets are updated with accurate and detailed information and resolved within the agreed service levels
• Escalation:
• Escalate complex issues to vendor support or appropriate teams when necessary
• Follow up on escalated issues to ensure timely resolution and user satisfaction
• Knowledge Base Management:
• Contribute to the creation and maintenance of a knowledge base, documenting common issues and solutions
• Share knowledge and best practices with team members to improve overall service quality
• Contribute to analysis and documentation of new requirements and change requests
• Participate in review of documentation such as requirements definitions, software design (functional/technical analysis), systems specifications or other deliverables
• Technical:
• Controlling, managing and providing access to the restricted areas managed by the business area
• Ensuring the proper functionality and security of software and hardware managed by NBAC
• Monitoring COTS Applications and other software managed by NBAC by identifying and reporting any problems with the infrastructure, hardware and software applications
• Providing support to NBAC team for security approval and accreditation of software applications and CIS
• Controlling and checking compliance with security regulations laid down by NCIA and NATO on the use of software and hardware which is part of the NBAC services
• Gathering functional and non-functional requirements, including drafting systems specifications
• Support technical reviews, walkthroughs and audits
• Support preparation of functional and technical specifications for software and hardware with special focus on the SSBA BA domain
• Support to change management, configuration management, release/deployment and testing
• Communication and Collaboration:
• Work with and provide input to Service Delivery Managers, Project Managers, Portfolio Managers and other stakeholders
• Collaborate with NCIA and vendors teams

Requirements

Skills, Knowledge & Experience:

• Deep understanding of end-user devices (desktops, laptops, tablets, smartphones) running Windows OS, Android OS and Apple iPhones/iPads
• Expert knowledge of computing infrastructure - Linux, Windows and Active Directory
• Expert knowledge of Microsoft SQL Server 2019-2025 and IIS based web applications
• Very good understanding and experience with AI/LLM
• Deep understanding of networking infrastructure
• Very good knowledge of cloud technologies and cloud deployment for both AWS and Azure
• Deep understanding of PKI, certificate management, post-quantum migration
• Expert knowledge relevant to software engineering: Technologies and standards (at least 4 of them): HTML5, REST & Web Services, XML, HTTP, SQL, Visual Basic for Applications; Identity Management (OAuth, OIDC, SAML2) application integration; Application server technologies and Relational Database Management Systems; Programming languages and platforms - .NET/C#, JAVA, JavaScript;
• Deep understanding of security constraints and requirements in CIS
• Deep understanding of NCIA and NATO security directives and regulations, along with understanding of industry best practices and standards
• Familiarity with Microsoft services and tools, including Outlook, Teams, SharePoint
• Experience and good knowledge of at least the following COTS technologies: IIS, JBOSS, Apache Tomcat; .NET based applications;
• Extensive experience in deployment and management of client-server applications, application integration and data transformation for application integration;
• Evidence-driven and vendor-neutral; able to say "not yet" and defend the position
• Strong technical skills to investigate, diagnose and resolve complex IT issues
• Excellent verbal and written communication skills
• Full proficiency in English. French language proficiency is of advantage
• Ability to communicate technical information to non-technical users in a clear and concise manner
• Ability to work in cross-functional application management/deployment teams
• Strong customer service focus with a commitment to user satisfaction
• Ability to manage multiple projects/activities and prioritize tasks effectively
• Attention to detail in documenting activities and maintaining accurate records
• At least 10 years of relevant experience in the field of computer science or electronic engineering
• Very good knowledge in multiple areas of Software Engineering including some of the following: Requirements elicitation and management (including non-functional requirements for Operations & Maintenance); Software change management and testing; Secure Software design, implementation and testing; Secure Software Engineering techniques and methodologies; Configuration management practices and tools; Application Lifecycle Management concept and tools
• Ability to work effectively as part of a team and share knowledge and resources
• Willingness to collaborate with colleagues to solve complex issues
• Candidate has strong customer relationship skills, including negotiating complex and sensitive situations under pressure
• Candidate must have the nationality of one of the NATO nations
• Candidate must possess a NATO Secret Security Clearance or national equivalent
• Prior experience in an international environment comprising both military and civilian elements;