C005299 CDSA Senior Engineer (NS) - THU 10 Sep

EMW; Henegouwen; Hybride; EUR 60 000 - 90 000; Plein temps

Avantages offerts par ce poste

Travel reimbursement

Remote work up to 20%

Résumé du poste

NCIA invites a hands-on Senior Cyber Security Engineer to support the CDSA platform in Mons, Belgium. The role blends technical development in Splunk with operational support for CyOC users, under DICE Team Lead supervision.

You will own dashboard design, data models, and automation, translating operational needs into technical solutions. Required: NATO SECRET clearance, Bachelor's degree (or 10 years equivalent experience), 3+ years with Splunk, and strong communication skills.

Qualifications

• Active NATO SECRET clearance.
• Bachelor's degree in a related discipline and 3 years post-related experience.
• Alternatively, 10 years of related experience in lieu of a degree.

Responsabilités

• Design, develop and maintain CDSA dashboards, visualizations, and UI components in Splunk.
• Build and optimize data models, KVStore, scheduled searches, macros and related Splunk objects.
• Develop automation and supporting scripts (Python, Bash or similar).
• Provide day-to-day technical and operational support to CyOC users.
• Act as a technical bridge between CyOC needs and the development contractor.
• Gather, prioritize and translate user feedback into technical requirements.
• Validate contractor deliverables before production deployment.
• Support Early Life Support (ELS) activities for new features and releases.
• Monitor dashboard performance, data quality, and platform health.
• Identify and drive improvements to dashboards, data pipelines, and platform functionality.
• Contribute to the CDSA roadmap and evolution.

Connaissances

Splunk dashboard development

Splunk UI development

Scripting Python Bash

REST APIs

Databases

Cybersecurity concepts

Communication skills

Analytical skills

Team collaboration

Formation

Bachelor's degree in a related discipline

Outils

Splunk

Cribl

REST APIs

Description du poste

Deadline Date: Thursday 10 September 2026

Requirement: CDSA Senior Engineer

Location: Mons, BE

Full Time On-Site: Yes (See Specific Working Conditions below)

Time On-Site: 100%

Total Scope of the request (hours): 395

Required Start Date: 15 October 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Duties & Role:

We are looking for a hands‑on Senior Cyber Security Engineer to support the Cyber Defence Situational Awareness (CDSA) platform.

The role combines technical development work (mainly in Splunk) with operational support and close coordination with both the development contractor and CyOC users. The role requires strong ownership, the ability to translate operational requirements into technical solutions, and a proactive approach to improving the platform.

Under the direction of the DICE Team Lead the contractor shall:

Technical Development & Maintenance

• Design, develop and maintain CDSA dashboards, visualizations, and user interface components in Splunk.
• Build and optimize data models, KVStore collections, scheduled searches, macros and related Splunk objects.
• Implement enhancements and defect fixes based on operational priorities and user feedback.
• Support the integration of new data sources and tools into CDSA (e.g. PLM, ACPV, Cribl, etc.).
• Develop automation and supporting scripts (Python, Bash or similar).

Operational Support & CyOC Coordination

• Provide day‑to‑day technical and operational support to Cyber Operations Centre (CyOC) users.
• Act as a technical bridge between CyOC operational needs and the development contractor (Infigo/King ICT).
• Gather, prioritize and translate user feedback into clear technical requirements.
• Validate and test contractor deliverables before production deployment.
• Support Early Life Support (ELS) activities for new features and releases.

Platform Health & Continuous Improvement

• Monitor dashboard performance, data quality, and overall platform health.
• Identify and drive improvements to existing dashboards, data pipelines and platform functionality.
• Contribute to the technical roadmap and evolution of the CDSA platform.

Specific Working Conditions: If working from a remote location, the contractor shall provide IT equipment for the processing of public and unclassified information in support of their duties, including the capability to participate in video meetings using Microsoft based collaboration tools.

The contractor may be permitted to perform work remotely, from a different NATO nation than the duty location, for up to a maximum of twenty percent (20%) of their total working time, subject to prior approval by their NCIA designated Resource Manager.

The contractor may be required to travel to other NCIA locations for in‑person or department meetings. In such cases the contractor will be reimbursed for travel costs according to NATO regulations for traveling on NATO duty. Each travel will be a maximum of 2 days lengths and happening no more than twice per month. Contractors traveling for work purposes shall initiate travel requests from their designated duty station only.

Skills, Knowledge & Experience:

• The candidate must have a currently active NATO SECRET security clearance
• A minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience;
• Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work.
• At least 3 years practical and hands‑on experience in Splunk (dashboard development, data models, KVStore, macros, scheduled searches).
• At least 3 years practical and hands‑on experience in Splunk UI development and visualization best practices.
• At least 3 years practical and hands‑on experience in scripting (Python, Bash, or similar).
• At least 3 years practical and hands‑on experience in interacting with REST APIs or similar
• At least 3 years practical and hands‑on experience in interacting with Databases
• Solid understanding of cybersecurity concepts (vulnerability management, threat intelligence, incident management).
• Proven ability to balance operational support with hands‑on development
• Good communication and analytical skills — able to translate technical topics for operational users and vice versa.
• Strong analytical and problem‑solving skills.
• Ability to work operationally with end users while also performing technical development work.
• Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency".

Education, Experience and Training (Desirable):

• Previous experience with CDSA or similar large Splunk-based platforms.
• Experience with data integration projects (REST APIs, DB Connect, Cribl, etc.).
• Knowledge of MITRE ATT&CK or vulnerability scoring methodologies.
• Prior experience with Machine Learning and Artificial Intelligence
• Previous work in NATO, military, or high-security environments.
• Certification in Splunk Enterprise
• Certification in Machine Learning and/or Artificial Intelligence