Senior Cyber Security Engineer 6

Brevco Services; Henegouwen; Hybrid; EUR 65,000 - 90,000; Full time

Job summary

Brevco Services is seeking a skilled Cybersecurity Architect to contribute to the development of solution architectures and security controls for complex systems. You will evaluate architectures, document decisions, and guide engineering projects with a focus on risk management and stakeholder collaboration.

The role requires hands-on experience in cybersecurity delivery, cryptographic topics, and cloud security design, with strong communication skills and experience leading small teams.

Qualifications

• 3+ years practical experience delivering services in Cybersecurity.
• Extensive practical experience identifying vulnerabilities and potential security threats.
• Development of technical requirements, system diagrams and other engineering products to aid Cybersecurity acquisition and procurement.
• Proven ability to deliver cyber security capabilities for industry, government, or military.
• Up-to-date knowledge of cyber security capabilities in operational environments, cryptographic technologies including key management, and identity & access management.
• Knowledge in network monitoring/detection technologies and cloud infrastructure security design.
• Ability to express complex architectures using methodologies and communicate with stakeholders.
• Proven ability to communicate effectively orally and in writing and to lead small teams.

Responsibilities

• Contributes to development of solution architectures in specific areas and evaluates alternatives.
• Documents architecturally significant decisions and produces cloud/on-premises specifications.
• Provides guidance on security controls and risk analysis for information systems.
• Manages requirements definition, prioritisation, baselines and traceability across initiatives.
• Leads user experience analysis to elicit usability and accessibility criteria.
• Provides technical input and leadership to engineering projects and supports procurement processes.

Skills

Cybersecurity experience

Vulnerability assessment

Security design

Stakeholder communication

Security risk analysis

Security controls

Security architecture

Education

Bachelor's degree

Tools

ArchiMate

CISM

CISSP

GIAC Security

Job description

Qualifications

• 3+ years practical experience developing or delivering services in Cybersecurity
• Extensive practical experience identifying vulnerabilities and potential security threats
• Development of technical requirements, system diagrams and other engineering products to aid Cybersecurity acquisition and procurement
• Proven ability to deliver cyber security capabilities for industry, government, or military
• Up-to-date knowledge and experience in the following areas:
  • Design and implementation of cyber security capabilities and supporting infrastructure elements in an operational environment
  • Cryptographic technologies including key management
  • Identity and access management
• Knowledge in the following areas:
  • Network monitoring and detection technologies
  • The design of cyber security capabilities on cloud infrastructure
  • Ability to apply architecture methodologies to express complex, systems of systems in architectural terms and models of varying detail
  • Recognised track record in dealing with stakeholders, understanding their needs, problems, and requests and proposing constructive ways ahead
  • Proactive attitude in seeking and maintaining trust from stakeholders
  • Proven ability to communicate effectively orally and in writing with good briefing skills
  • Experience leading small teams
• Proficient at using the ArchiMate modelling language
• Relevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security

Desirable Qualifications/Experience

• Experience in working for or supporting a military or governmental organization
• Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience
• Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidates particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work

DUTIES/ROLE

• Solution architecture:
  • Contributes to the development of solution architectures in specific business, infrastructure or functional areas
  • Identifies and evaluates alternative architectures and the trade-offs in cost, performance and scalability
  • Determines and documents architecturally significant decisions
  • Produces specifications of cloud-based or on-premises components, tiers and interfaces, for translation into detailed designs using selected services and products
  • Supports projects or change initiatives through the preparation of technical plans and application of design principles
  • Aligns solutions with enterprise and solution architecture standards (including security)
  • Provides guidance on the application and operation of elementary physical, procedural and technical security controls
  • Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems
  • Identifies risks that arise from potential technical solution architectures
  • Designs alternate solutions or countermeasures and ensures they mitigate identified risks
  • Investigates suspected attacks and supports security incident management
• Requirements definition and management:
  • Defines and manages scoping, requirements definition and prioritisation activities for initiatives of medium size and complexity
  • Contributes to selecting the requirements approach
  • Facilitates input from stakeholders, provides constructive challenge and enables effective prioritisation of requirements
  • Establishes requirements baselines, obtains formal agreement to requirements, and ensures traceability to source
• User experience analysis:
  • Selects appropriate techniques and tools to develop user stories and elicit user experience requirements in complex situations
  • Identifies and describes the design goals for systems, products, services and devices
  • Identifies the roles of affected stakeholder groups
  • Specifies measurable criteria for the required usability and accessibility of systems, products, services and devices
• Project implementation responsibilities:
  • Provides cyber security technical and professional input and technical leadership to engineering projects. These contributions will include, but are not limited to, statement of work preparation, execution planning, cyber items procurement, cyber security delivery effort coordination between assigned hands-on engineers within NCIA and NCSC by following multi-layer change management framework, problems identification and resolution, internal and external to NCSC quality control management, contribution to internal written and not written knowledge management, results' documentation (system post-implementation specifications, instructions, updates to cyber security services documentation), handover to NCSC cyber security services for operations and operations and maintenance costs calculations
  • Provides technical input and support to acquisition projects including, but not limited to, writing and reviewing / coordinating cyber security requirements (statement of work, system design specification, high and low level design blueprints, bill of material), supporting procurement process (providing answers to raised questions); evaluating bids
  • Develops and presents cyber security scientific, engineering, technical, and marketing information suitable for official meetings
  • Represents the NCIA/ NCSC in working groups and forums
  • Executes tasks assigned by Branch, NCSC Service Delivery Managers and Resource manager

Job requirements

All the mandatory requirements have to be met in order to apply.

• 3+ years practical experience developing or delivering services in Cybersecurity (Mandatory)
• Extensive practical experience identifying vulnerabilities and potential security threats (Mandatory)
• Development of technical requirements, system diagrams and other engineering products to aid Cybersecurity acquisition and procurement (Mandatory)
• Proven ability to deliver cyber security capabilities for industry, government, or military (Mandatory)
• Up-to-date knowledge and experience in the following areas: (Mandatory)
  • Design and implementation of cyber security capabilities and supporting infrastructure elements in an operational environment (Mandatory)
  • Cryptographic technologies including key management (Mandatory)
  • Identity and access management (Mandatory)
• Knowledge in the following areas: (Mandatory)
  • Network monitoring and detection technologies (Mandatory)
  • The design of cyber security capabilities on cloud infrastructure (Mandatory)
  • Ability to apply architecture methodologies to express complex, systems of systems in architectural terms and models of varying detail (Mandatory)
  • Recognised track record in dealing with stakeholders, understanding their needs, problems, and requests and proposing constructive ways ahead (Mandatory)
  • Proactive attitude in seeking and maintaining trust from stakeholders (Mandatory)
  • Proven ability to communicate effectively orally and in writing with good briefing skills (Mandatory)
  • Experience leading small teams (Mandatory)
• Proficient at using the ArchiMate modelling language (Mandatory)
• Relevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security (Mandatory)
• Experience in working for or supporting a military or governmental organization (Nice to have)
• Bachelors degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience (Nice to have)
• Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidates particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work (Nice to have)