Expert on Defensive Cyberspace Operations Management (DSO)

NCIM; Henegouwen; On-site; EUR 90,000 - 130,000; Full time

Job summary

NATO SHAPE in Mons, Belgium, seeks an experienced DCO operations professional to plan, coordinate and oversee defensive cyberspace operations across NATO networks. You will manage the full DCO lifecycle, lead collaboration among multiple NATO bodies, and support incident response and remediation initiatives.

The role requires proven PM experience, strong cyber operation skills, and NATO SECRET clearance (held or obtainable). On-site five days a week with potential travel to NATO locations.

Qualifications

• More than 2 years of direct experience in Defensive Cyberspace Operations, military-focused environments.
• Practical experience in advanced cyber operations, incident response, threat hunting and adversary emulation.
• Minimum 3 years of proven project management experience.
• Experience coordinating planning, execution and technical remediation activities across multiple organizations in a federated environment.
• Strong knowledge of cybersecurity principles, policies and procedures, preferably within military or defense organizations.
• Excellent communication, negotiation and stakeholder management skills.
• Excellent English writing skills, with the ability to produce clear and concise reports and deliver presentations and briefings.
• Ability to work independently and coordinate complex operational activities with minimal supervision.
• NATO SECRET security clearance required (must be held or obtainable).

Responsibilities

• Plans, coordinates and oversees advanced Defensive Cyberspace Operations (DCO) across NATO networks.
• Manages the full DCO lifecycle, including planning, execution, assessment and follow-up.
• Coordinates advanced cyber defense activities, including threat hunting, adversary emulation and deception technologies.
• Develops DCO operational plans, processes and supporting procedures.
• Works with NATO subject matter experts to develop red and blue operational pictures in support of operational planning.
• Coordinates activities and ensures effective collaboration between NATO CDT, CyOC, NCIA, JISD and other relevant stakeholders.
• Supports the NATO Defensive Cyberspace Operations Planning and Coordination Cell (DPCC), facilitating meetings, discussions and operational initiatives.
• Supports cybersecurity incident response activities, including coordination and assessment of ongoing incidents.
• Develops actionable remediation plans based on findings and lessons identified during DCO execution.
• Supports cyber risk management and decision-making processes in coordination with the Cyber Risk Management Group (CRMG) and Board of CISOA (BCISOA).
• Prepares technical and non-technical reports, briefings and presentations for stakeholders and senior leadership.
• Provides operational advice and guidance throughout the DCO lifecycle.
• Occasional travel to NATO Command Structure locations may be required.

Skills

Communication skills

Negotiation

Stakeholder management

Independent work

English writing

Tools

CISM

CISSP

Job description

Duties

• Plans, coordinates and oversees advanced Defensive Cyberspace Operations (DCO) across NATO networks.
• Manages the full DCO lifecycle, including planning, execution, assessment and follow-up.
• Coordinates advanced cyber defense activities, including threat hunting, adversary emulation and deception technologies.
• Develops DCO operational plans, processes and supporting procedures.
• Works with NATO subject matter experts to develop red and blue operational pictures in support of operational planning.
• Coordinates activities and ensures effective collaboration between NATO CDT, CyOC, NCIA, JISD and other relevant stakeholders.
• Supports the NATO Defensive Cyberspace Operations Planning and Coordination Cell (DPCC), facilitating meetings, discussions and operational initiatives.
• Supports cybersecurity incident response activities, including coordination and assessment of ongoing incidents.
• Develops actionable remediation plans based on findings and lessons identified during DCO execution.
• Supports cyber risk management and decision-making processes in coordination with the Cyber Risk Management Group (CRMG) and Board of CISOA (BCISOA).
• Prepares technical and non-technical reports, briefings and presentations for stakeholders and senior leadership.
• Provides operational advice and guidance throughout the DCO lifecycle.
• Full-time, on-site position at NATO SHAPE in Mons, Belgium (5 days per week).
• Occasional travel to NATO Command Structure locations may be required.

Requirement

• More than 2 years of direct experience in Defensive Cyberspace Operations, particularly planning and conducting operations in military-focused environments.
• Practical experience in advanced technical cyber operations, incident response, threat hunting and adversary emulation.
• Minimum 3 years of proven project management experience.
• Experience coordinating planning, execution and technical remediation activities across multiple organizations in a federated environment.
• Strong knowledge of cybersecurity principles, policies and procedures, preferably within military or defense organizations.
• Excellent communication, negotiation and stakeholder management skills.
• Excellent English writing skills, with the ability to produce clear and concise reports and deliver presentations and briefings.
• Ability to work independently and coordinate complex operational activities with minimal supervision.
• NATO SECRET security clearance required (must be held or obtainable).

Preferences

• Previous NATO experience in cybersecurity, cyber defense, cyberspace operations, cyber risk management or cyber incident management.
• Experience working within military, government or international defense organizations.
• Relevant cybersecurity certifications such as CISM, CISSP or equivalent.
• Postgraduate degree in Cybersecurity or a related discipline.