Cyber Security Officer / Section Head

Spektrum; Schramberg; Vor Ort; EUR 90.000 - 135.000; Vollzeit

Zusammenfassung

Spektrum seeks an experienced Cyber Security Leader to develop and oversee secure IT solutions for NATO-related operations. You will manage a small team, coordinate with the NATO CIS Centre, and ensure robust security across SCADA/enterprise environments.

Responsibilities include designing security controls, leading audits, and mentoring 3-4 cyber security personnel. The role requires CTS-A clearance and hands-on experience with Trellix, Palo Alto, and VMware technologies.

Qualifikationen

• Minimum 5 years' experience in Windows Server security hardening, including security baseline implementation, policy enforcement, vulnerability mitigation, and system compliance.
• Minimum 3 years' experience with Trellix ePolicy Orchestrator and Trellix Endpoint Security, including Trellix Data Loss Prevention and Trellix Application Control (or equivalent security software).
• Minimum 2 years' experience with system security, security architecture, network security engineering, security governance, and risk management.
• Detailed knowledge and hands-on experience with security and networking technologies, including IPv4, software-based firewalls, VPNs, intrusion detection, and forensic tools.
• Practical experience with wireless LAN technologies and endpoint security for mobile devices (laptops, tablets, smartphones).
• Experience with security incident handling, interpreting Cyber Security audit results, and conducting risk assessments.
• Experience identifying and mitigating security vulnerabilities.
• Experience supporting NATO Enterprise CIS, with knowledge of NATO responsibilities and organization (including NATO Command Structure, ACO & ACT) and NATO Security Policy and supporting directives.
• Knowledge and experience with Palo Alto Enterprise firewalls, Public Key Infrastructure, and McAfee Endpoint Security Enterprise solutions.
• Experience with Windows Server 2022/2019/2016 and Windows 11/10 environments.
• Experience managing centralized endpoint security (AV, DLP, Application Control, drive encryption) solutions, particularly Trellix, and using vulnerability scanners (Nessus).
• Knowledge and experience with server, network, and storage virtualization technologies (VMware vSphere, ESX, NSX, vSAN).
• Fundamental knowledge of cloud technologies.
• Familiarity with ITIL or other IT service management frameworks (incident, request fulfilment, problem, change, and capacity management).
• Basic understanding of Disaster Recovery (DR) and Business Continuity (BC) concepts (RPO, RTO, MTTR, MTBF) and approaches (active-active, active-passive).
• Prior experience working in an international environment comprising both military and civilian elements.

Aufgaben

• Develop effective, agile, and resilient cyber security solutions tailored to operational requirements and environmental conditions in support of CSU Ramstein's mission.
• Consult with stakeholders to evaluate functional requirements and translate them into technical solutions.
• Design, develop, test, and evaluate information system security throughout the systems development lifecycle.
• Apply and maintain security controls as required by organisational policy and local risk assessments.
• Communicate security risks and issues to business managers and other stakeholders.
• Perform basic risk assessments for small information systems, and contribute to identifying risks arising from potential technical solution architectures.
• Suggest alternate solutions or countermeasures to mitigate risks, and define secure systems configurations compliant with intended architectures.
• Support investigation of suspected attacks and security breaches.
• Lead a team of 3-4 Cyber Security and COMSEC personnel through day-to-day operations.
• Act as Cyber Security Section Head, administering all Cyber Security activities in coordination with the NATO Cyber Security Centre (NCSC), including boundary protection management, data loss prevention, and enterprise antimalware.
• Schedule, coordinate, and facilitate security audits and inspections, and manage post-inspection actions.
• Supervise monitoring, testing, and evaluation of computer security systems, including the Cyber Security aspects of CIS Accreditation.
• Plan and, as necessary, implement Cyber Security services in support of Agency SLs, DSO, Strat, and other organizational elements as applicable.
• Deputise for higher-grade staff as required.
• Support physical task requirements with the ability to lift up to 25 lbs.

Kenntnisse

Windows security hardening

Tre llix ePolicy Orchestrator

Tre llix Endpoint Security

Tre llix Data Loss Prevention

Tre llix Application Control

Security architecture

Network security engineering

Cyber security incident handling

Palo Alto firewalls

Public Key Infrastructure (PKI)

Nessus vulnerability scanning

VMware vSphere

Security clearance CTS-A

Ausbildung

Bachelor's degree in a related discipline

6+ years of extensive and progressive relevant experience in lieu of degree

Tools

Trellix ePolicy Orchestrator

Trellix Data Loss Prevention

Trellix Endpoint Security

Trellix Application Control

Nessus

Palo Alto firewalls

VMware vSphere

Jobbeschreibung

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – C005157

Role Duties and Responsibilities

• Develop effective, agile, and resilient cyber security solutions tailored to operational requirements and environmental conditions in support of CSU Ramstein's mission.
• Consult with stakeholders to evaluate functional requirements and translate them into technical solutions.
• Design, develop, test, and evaluate information system security throughout the systems development lifecycle.
• Apply and maintain security controls as required by organisational policy and local risk assessments.
• Communicate security risks and issues to business managers and other stakeholders.
• Perform basic risk assessments for small information systems, and contribute to identifying risks arising from potential technical solution architectures.
• Suggest alternate solutions or countermeasures to mitigate risks, and define secure systems configurations compliant with intended architectures.
• Support investigation of suspected attacks and security breaches.
• Lead a team of 3-4 Cyber Security and COMSEC personnel through day-to-day operations.
• Act as Cyber Security Section Head, administering all Cyber Security activities in coordination with the NATO Cyber Security Centre (NCSC), including boundary protection management, data loss prevention, and enterprise antimalware.
• Schedule, coordinate, and facilitate security audits and inspections, and manage post-inspection actions.
• Supervise monitoring, testing, and evaluation of computer security systems, including the Cyber Security aspects of CIS Accreditation.
• Plan and, as necessary, implement Cyber Security services in support of Agency SLs, DSO, Strat, and other organizational elements as applicable.
• Deputise for higher-grade staff as required.
• Support physical task requirements with the ability to lift up to 25 lbs.

Essential Skills, Experience and Certifications

• Security clearance: COSMIC TOP SECRET-ATOMAL (CTS-A), provided by the national security organization, valid and available at time of submission and covering the full contract period.
• Minimum 5 years' experience in Windows Server security hardening, including security baseline implementation, policy enforcement, vulnerability mitigation, and system compliance.
• Minimum 3 years' experience with Trellix ePolicy Orchestrator and Trellix Endpoint Security, including Trellix Data Loss Prevention and Trellix Application Control (or equivalent security software).
• Minimum 2 years' experience with system security, security architecture, network security engineering, security governance, and risk management.
• Detailed knowledge and hands-on experience with security and networking technologies, including IPv4, software-based firewalls, VPNs, intrusion detection, and forensic tools.
• Practical experience with wireless LAN technologies and endpoint security for mobile devices (laptops, tablets, smartphones).
• Experience with security incident handling, interpreting Cyber Security audit results, and conducting risk assessments.
• Experience identifying and mitigating security vulnerabilities.
• Experience supporting NATO Enterprise CIS, with knowledge of NATO responsibilities and organization (including NATO Command Structure, ACO & ACT) and NATO Security Policy and supporting directives.
• CISM or CISSP certification.
• Bachelor's degree from a nationally certified university in a related discipline plus 2 years' post-related experience (or, exceptionally, 6+ years' extensive and progressive relevant experience in lieu of degree).
• Ability to work independently and manage multiple tasks simultaneously.
• Demonstrated ability to handle stressful situations calmly, with an empathetic, patient, user-supportive approach.
• Excellent written and verbal communication skills, capable of conveying complex technical information in a user-friendly manner.
• Strong analytical skills, capable of quickly identifying issues and determining efficient resolutions.
• Knowledge and experience with Palo Alto Enterprise firewalls, Public Key Infrastructure, and McAfee Endpoint Security Enterprise solutions.
• Experience with Windows Server 2022/2019/2016 and Windows 11/10 environments.
• Experience managing centralized endpoint security (AV, DLP, Application Control, drive encryption) solutions, particularly Trellix, and using vulnerability scanners (Nessus).
• Knowledge and experience with server, network, and storage virtualization technologies (VMware vSphere, ESX, NSX, vSAN).
• Fundamental knowledge of cloud technologies.
• Familiarity with ITIL or other IT service management frameworks (incident, request fulfilment, problem, change, and capacity management).
• Basic understanding of Disaster Recovery (DR) and Business Continuity (BC) concepts (RPO, RTO, MTTR, MTBF) and approaches (active-active, active-passive).
• Prior experience working in an international environment comprising both military and civilian elements.

Training and Certifications (Desirable)

• CGRC/CAP, CASP+ (or Cloud+, PenTest+, Security+, GSEC, or equivalent)
• ITIL v3 or v4 Foundation
• 0280 NATO CIS Security Officer
• Additional security certification: CISM, CISSP, CISSO, CPTE, CySA+, FITSP-A, GCSA, CISA, CISSP-ISSEP, GSLC, GSNA (CEH, GIAC, ISC2, or other relevant certification)

Working Location

Working Policy

• Full-time on-site; 38 hours/week, Monday–Friday.

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid NATO COSMIC Top-Secret- ATOMAL (CTS-A)