Senior Engineer, CIS Security

Mycompas; Eigenbrakel; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Mycompas seeks a security accreditation specialist to support NATO CIS programs. You will conduct security risk assessments, identify threats, and help develop documentation for accreditation, including risk assessment reports and security operating procedures.

This role emphasizes edge security, enterprise protection, and implementation of CIS security measures across networks and systems in alignment with NATO CIS directives.

Qualifications

• Comprehensive knowledge of and experience with conducting security risk assessments and the security accreditation process, including documentation development.
• Comprehensive knowledge of computer and communication security, networking, edge security and OS/app vulnerabilities.
• Experience implementing and integrating CIS security measures in enterprise environments.

Responsabilités

• Provide security accreditation support for NATO CIS with a focus on edge security for internal operations and customer-funded networks.
• Conduct security risk assessments for NATO CIS assets, identify threats, and propose risk management measures.
• Develop required accreditation documents such as Security Description, SOPs, and Risk Assessment Reports; explore automation and data sets for these documents.

Connaissances

Security risk assessments

Security accreditation

Documentation development

Edge security

Networking fundamentals

Vulnerabilities awareness

CIS security measures

Outils

Security frameworks (NIST/ISO)

Description du poste

• Comprehensive knowledge of and experience with conducting security risk assessments and with the security accreditation process, including the development of the required documentation ;
• Comprehensive knowledge of the principles of computers and communication security, networking, edge security and the vulnerabilities of modern operating systems and applications ;
• Experience with implementation and integration of CIS Security protective measures in enterprise environments .

- Providing security accreditation support of the NISC managed CIS, with focus on edge security, both for internal operations and for Agency's customer-funded networks, and ensuring the adequate level of systems/data protection in accordance with NATO CIS Security policies and directives ;

Conducting Security Risk Assessment in support of security accreditation of NATO CIS, in particular; identifying level of threats and vulnerabilities for all assets comprising NATO CIS, deriving residual risks and providing risk management recommendations ;

Contributing to the development of required documents for security accreditation (CIS Description, Security Accreditation Plan, Security Risk Assessment Report, Security Requirement Statements, Security Operating Procedures, and Security Test and Verification Plan). Seeking automated processes and proposing datasets as inputs for the development of the security accreditation documents.