Senior Cyber Security Engineer 6

NCIM; Henegouwen; On-site; EUR 70,000 - 110,000; Full time

Job summary

NCIM in Belgium seeks a seasoned cybersecurity architect to develop solution architectures, assess trade-offs, and document critical decisions. You will produce designs for cloud and on-premises components, align with security standards, and guide projects through risk-aware planning and stakeholder collaboration.

Applicants should have 3+ years in cybersecurity delivery, strong knowledge of risk management and IAM, and possess relevant certifications.

Qualifications

• 3 years practical experience delivering cybersecurity services.
• Experience identifying vulnerabilities and threats.
• Develop technical requirements and system diagrams for cybersecurity projects.
• Proven ability to deliver cybersecurity capabilities for industry, government, or military.
• Knowledge of cryptographic technologies including key management.
• Knowledge of identity and access management.
• Knowledge of risk management.
• Experience with network monitoring and detection technologies.
• Experience designing cybersecurity capabilities on cloud infrastructure.
• English proficiency at NATO STANAG 6001 Level 3.
• Certifications such as CISM, CISSP or GIAC Security.
• Bachelor's degree plus 3 years post-related experience; or 10 years' equivalent expertise.

Responsibilities

• Contributes to development of solution architectures in specific business, infrastructure or functional areas.
• Identifies and evaluates alternative architectures and trade-offs in cost, performance and scalability.
• Documents architecturally significant decisions.
• Produces specifications of cloud-based or on-premises components for detailed designs.
• Supports projects with technical plans and design principles.
• Aligns solutions with enterprise and solution architecture standards (including security).
• Provides guidance on security controls and their operation.
• Explains the purpose of security controls and performs security risk and business impact analysis.
• Identifies risks from potential technical solution architectures.
• Designs alternate solutions or countermeasures to mitigate risks.
• Investigates suspected attacks and supports security incident management.
• Defines scoping and requirements for medium-size initiatives.
• Facilitates input from stakeholders and enables prioritisation of requirements.
• Establishes baselines, gets formal agreement and ensures traceability.
• Selects techniques to develop user stories and elicit user experience requirements.
• Identifies design goals for systems and roles of stakeholders.
• Resolves conflicts between differing user requirements.
• Specifies measurable usability and accessibility Criteria.
• Provides cyber security input and leadership to engineering projects.
• Writes cyber security requirements for acquisitions; supports procurement processes.
• Develops and presents cyber security information for official meetings.
• Represents NCIA/NCSC in working groups and forums.
• Executes tasks assigned by Branch, Service Delivery Managers and Resource manager.

Skills

Cybersecurity

Security risk analysis

Architectural design

Stakeholder management

Team leadership

English proficiency

Education

Bachelor's degree from a recognised university

Job description

Duties

• Contributes to the development of solution architectures in specific business, infrastructure or functional areas.
• Identifies and evaluates alternative architectures and the trade-offs in cost, performance and scalability.
• Determines and documents architecturally significant decisions.
• Produces specifications of cloud-based or on-premises components, tiers and interfaces, for translation into detailed designs using selected services and products.
• Supports projects or change initiatives through the preparation of technical plans and application of design principles.
• Aligns solutions with enterprise and solution architecture standards (including security).
• Provides guidance on the application and operation of elementary physical, procedural and technical security controls.
• Explains the purpose of security controls and performs security risk and business impact analysis for medium complexity information systems.
• Identifies risks that arise from potential technical solution architectures.
• Designs alternate solutions or countermeasures and ensures they mitigate identified risks.
• Investigates suspected attacks and supports security incident management.
• Defines and manages scoping, requirements definition and prioritisation activities for initiatives of medium size and complexity.
• Contributes to selecting the requirements approach.
• Facilitates input from stakeholders, provides constructive challenge and enables effective prioritisation of requirements.
• Establishes requirements baselines, obtains formal agreement to requirements, and ensures traceability to source.
• Selects appropriate techniques and tools to develop user stories and elicit user experience requirements in complex situations.
• Identifies and describes the design goals for systems, products, services and devices.
• Identifies the roles of affected stakeholder groups.
• Resolves potential conflicts between differing user requirements.
• Specifies measurable criteria for the required usability and accessibility of systems, products, services and devices.
• Provides cyber security technical and professional input and technical leadership to engineering projects.
• Provides technical input and support to acquisition projects including, but not limited to, writing and reviewing / coordinating cyber security requirements (statement of work, system design specification, high and low level design blueprints, bill of material), supporting procurement process (providing answers to raised questions); evaluating bids;
• Develops and presents cyber security scientific, engineering, technical, and marketing information suitable for official meetings.
• Represents the NCIA/ NCSC in working groups and forums.
• Executes tasks assigned by Branch, NCSC Service Delivery Managers and Resource manager.

Requirement

• At least 3 years practical experience developing or delivering services in Cybersecurity.
• Extensive practical experience identifying vulnerabilities and potential security threats.
• Development of technical requirements, system diagrams and other engineering products to aid Cybersecurity acquisition and procurement.
• Proven ability to deliver cyber security capabilities for industry, government, or military.
• Design and implementation of cyber security capabilities and supporting infrastructure elements in an operational environment;
• Cryptographic technologies including key management;
• Identity and access management;
• Risk management.
• Network monitoring and detection technologies;
• The design of cyber security capabilities on cloud infrastructure.
• Ability to apply architecture methodologies to express complex, systems of systems in architectural terms and models of varying detail; Recognised track record in dealing with stakeholders, understanding their needs, problems, and requests and proposing constructive ways ahead.
• Experience leading small teams.
• Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency".
• Relevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security.
• A minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience.
• Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work.

Preferences

• Experience in working for or supporting a military or governmental organization.