Cyber Defense & Incident Response Lead

NATO; Norfolk (CT); On-site; USD 120,000 - 160,000; Full time

Job summary

NATO is seeking a seasoned Cyber Security professional to contribute to the Command, Control and Cyber defense posture at HQ SACT. The role focuses on real-time incident handling, threat analysis, and implementation of comprehensive security controls across networks and systems.

The ideal candidate has five+ years in cyber security, risk management, and project leadership within large organizations, with experience in contracted staff management and change management processes.

Qualifications

• University Degree in computer security, information technology, computer science or related discipline and 2 years function related experience, or Higher Secondary education and completed advanced vocational training in that discipline leading to a professional qualification or professional accreditation with 4 years post related experience.
• A minimum of five years practical experience in Cyber Security and risk management, in a large military or civilian organization.
• Two years' experience in managing contracted staff.
• Experience in managing IT and Cyber related projects and the management of associated risks.
• Good working knowledge of organizational change management processes and stakeholder management.

Responsibilities

• Contribute to the implementation of the CISOA's role and responsibilities within HQ SACT and the subordinate commands (JWC, JFTC, JALLC, JATEC).
• Perform real-time cyber defense incident handling tasks (e.g., forensic collections, intrusion correlation and tracking, threat analysis, and direct system remediation)Conduct security triage to identify and analyze cyber incidents and threats.
• Actively monitor networks and systems for cyber incidents and threats.
• Conduct risk analysis and security reviews of system logs to identify possible cyber threats.
• Conduct analysis and review, and/or apply network scanners, vulnerability assessment tools, network protocols, internet security protocols, intrusion detection systems, firewalls, content checkers and endpoint software.
• Collect and analyze data to identify cyber security flaws and vulnerabilities and make recommendations that enable prompt remediation.
• Develop and prepare cyber defence incident analysis and reporting.
• Define and maintain tool sets and procedures.
• Develop, implement, and evaluate prevention and incident response plans and activities, and adapt to contain, mitigate or eradicate effects of cyber security incident.
• Provide incident analysis support on response plans and activities.
• Conduct research and development on cyber security incidents and mitigations.
• Create a program development plan that includes security gap assessments, policies, procedures, playbooks, and training manuals.
• Review, develop and deliver relevant training material.
• Contribute to the execution of the Security Accreditation Process in collaboration with ACT Office of Security.
• Design, deploy and maintain the HQ SACT Cyber protection program which is to be complimentary to the capability output of HQ SACT. This must be considered a constantly changing environment, in particular enabling the communities of interest approach for staff work;
• Ensure information/knowledge resources are protected whilst remaining readily accessible and easily retrieved.
• Provide guidance on Cyber evolution across HQ SACT.
• Increase staff awareness and the best practises for Cyber hygiene.
• Contribute with NATO HQ and ACO to develop and maintain the NATO Cyber Security policies;
• Ensure the HQ SACT Cyber Defence Posture Level is maintained in coordination with OCIO and allows the functions of the HQ to continue;
• Develop and maintain external and internal relationships to enable the CDI Branch to achieve its aims;
• Contribute to the Cyber Incident Management for ACT;
• Liaise, when required with HQ SACT Capability Development Directorate (CAPDEV) for the development of current and emerging technologies to enable the development of cutting-edge tools, business management processes whilst protecting critical HQ information;
• Assist with all aspects of CDI Branch as required by the Section Head.

Job description

NATO is seeking a seasoned Cyber Security professional to contribute to the Command, Control and Cyber defense posture at HQ SACT. The role focuses on real-time incident handling, threat analysis, and implementation of comprehensive security controls across networks and systems.

The ideal candidate has five+ years in cyber security, risk management, and project leadership within large organizations, with experience in contracted staff management and change management processes.