SIEM & Splunk Cyber Defender (Enterprise)

North Atlantic Treaty Organization; Henegouwen; Sur place; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

Private health insurance scheme

30 days annual leave

NATO Pension Scheme

Professional training and wellbeing

Résumé du poste

NCIA invites applications for a Cyber Security Defender (SIEM & Splunk) based in Mons, Belgium, to join the NATO Cyber Security Centre (NCSC) and contribute to lifecycle management of data security systems and SIEM operations across NATO CIS.

The role requires strong SIEM expertise, Splunk architecture, Linux, scripting, and English fluency. You will work autonomously within ITIL-aligned processes and collaborate with cross-functional teams to protect NATO networks.

Qualifications

• Bachelor’s degree in a related discipline with 2 years’ experience, or 6+ years of applicable expertise.
• At least 1 year of SIEM administrator experience in a large enterprise.
• Hands-on experience in design and maintenance of distributed Splunk architectures.
• 2+ years of SIEM and Log collection management with Splunk Enterprise.
• Experience analyzing and interpreting system, security and application logs to diagnose faults.
• Hands-on Linux systems administration.
• Knowledge of computer and network security principles.
• Scripting in Bash, Python, or Ansible for automation.
• Strong documentation and ability to work autonomously.
• Excellent written and spoken English.

Responsabilités

• Act as SME for SIEM and log collection services.
• Provide advice and technical assistance; stay updated on security technologies.
• Responsible for management and development of data security systems.
• Follow ITIL standards; support Service Design, Transition, Operations, Change Management.
• Ensure data security systems are installed, configured and integrated with dependencies.

Connaissances

SIEM administration

Splunk

Linux

Python scripting

Log analysis

Networking basics

Documentation skills

English fluency

Formation

Bachelor’s degree in related discipline

Outils

Splunk Enterprise

Ansible

Bash scripting

Python scripting

Description du poste

NCIA invites applications for a Cyber Security Defender (SIEM & Splunk) based in Mons, Belgium, to join the NATO Cyber Security Centre (NCSC) and contribute to lifecycle management of data security systems and SIEM operations across NATO CIS.

The role requires strong SIEM expertise, Splunk architecture, Linux, scripting, and English fluency. You will work autonomously within ITIL-aligned processes and collaborate with cross-functional teams to protect NATO networks.