Enterprise Cloud Expert Support Services

Aegis Vision; Brussel Hoofdstad; Sur place; EUR 90 000 - 140 000; Plein temps

Résumé du poste

NATO Headquarters in Brussels, Belgium seeks a Senior Cloud Security Engineer to design and secure cloud services, lead accreditation activities, and drive risk-informed decision making. You will implement Zero Trust architectures, coordinate risk assessments, and ensure continuous assurance across enterprise cloud environments.

Candidates should have senior cloud security experience, strong knowledge of security frameworks (ISO/NIST), and excellent communication skills in English.

Qualifications

• University degree in a relevant technical field.
• Senior experience in cloud security engineering and control implementation.
• Experience designing security architectures with Zero Trust principles.
• Knowledge of ISO 27001/27005 or NIST frameworks and risk management.
• Strong English writing and presentation skills; NATO security context is a plus.

Responsabilités

• Cloud Security Engineering & Architecture: design and implement secure cloud solutions (IaaS, PaaS, SaaS).
• Accreditation Support: coordinate security accreditation for cloud and AI-enabled systems.
• Cyber Risk Assessments: perform risk assessments and document treatment options.
• Continuous Assurance & Compliance: define monitoring, vulnerability management, and configuration controls.
• Stakeholder Coordination: deliver technical briefs and reports to committees and boards.

Connaissances

Cloud Security Engineering

Security Architecture

Zero Trust

Risk Management

Formation

University degree in CS / Systems Science

Description du poste

Location: NATO Headquarters in Brussels, Belgium

Duties & Roles:

• Cloud Security Engineering & Architecture: Support the secure design and implementation of IaaS, PaaS, and SaaS cloud solutions. Assist in developing security architecture patterns, hardening baselines, secure connectivity, identity and access management, logging/monitoring, encryption, and secure CI/CD practices.
• Accreditation Support: Support end-to-end security accreditation for cloud environments and AI-enabled systems. Coordinate inputs from engineering and service teams, resolve security findings, and provide regular updates to the Security Accreditation Task Force and relevant boards.
• Cyber Risk Assessments: Conduct and coordinate cyber risk assessments for cloud services. Translate technical security vulnerabilities into enterprise-level risks, register them, and document pragmatic risk treatment options within the Enterprise Risk Management (ERM) Framework.
• Continuous Assurance & Compliance: Define continuous assurance approaches including control monitoring, vulnerability management, and configuration compliance. Support automation of compliance verification where feasible to enable operational and executive decision-making.
• Stakeholder Coordination & Technical Communication: Engage technical teams, service owners, risk owners, and security stakeholders across multiple locations. Prepare and deliver technical briefings, reports, and presentations for committees, capability panels, and working groups.

Skill, Knowledge & Experience:

Education: A university degree in a relevant technical field such as computer science, systems science, or an equivalent technical qualification.

Core Cybersecurity Technical Knowledge: Comprehensive knowledge of computer communications security, networking principles, and the vulnerabilities of modern operating systems, applications, and cloud layers.

Professional Experience: Senior experience in cloud security engineering, control implementation, and securing enterprise cloud environments. Experience defining and implementing security architectures using Zero Trust principles.

Risk Management & Analysis: Proven experience in cyber risk management, security governance, and vulnerability analysis (mapping technical findings directly to business or operational impact). Experience managing or delivering cybersecurity programs across incidents, risk, and cyber defense.

Frameworks & Methodologies: Knowledge of risk/security frameworks (such as ISO 27001/27005, NIST, or equivalent) and project management skills within a cyber defence domain. Strong English writing, presentation, and facilitation skills.

Desirable Elements: Knowledge of NATO Security Policy, Directives, the Digital Policy Committee (DPC) substructure, and NATO CIS Security Accreditation processes. Professional certifications such as CCSP (Certified Cloud Security Professional), CISM, or CRISC are highly valued.

Clearance: A valid NATO Secret security clearance is mandatory.