Cyber Security Defender

Job Posting Organization:
The NATO Communications and Information Agency (NCIA) has been operational for over 70 years, dedicated to preserving peace and security" style="border-bottom: 1px dotted #007bff !important;">security for nearly one billion citizens. With a workforce of approximately 3000 civilian and military staff, the NCIA operates in 29 locations across Europe, North America, and Asia. The agency focuses on providing the technological and cyber capabilities necessary for NATO to conduct critical operations, protect airspace, and defend against cyber threats. The NCIA values its personnel as its greatest asset and is committed to hiring, training, and retaining top talent to maintain NATO's technological edge.

Job Overview:
The position of Cyber Security Defender is based in Mons, Belgium, and is part of NATO's initiative to enhance its IT services in support of NATO's Digital Endeavour. The role is situated within the NATO Cyber Security Centre (NCSC), which is tasked with lifecycle management activities for cyber security. The NCSC provides specialized services that encompass scientific, technical, acquisition, operations, maintenance, and sustainment support for NATO Communications and Information Systems (CIS). The Cyber Security Defender will be responsible for deploying cyber defense equipment, conducting analyses to identify security threats, supporting incident response efforts, and maintaining various cyber defense tools. This role is critical in ensuring the security and integrity of NATO's information systems.

Duties and Responsibilities:
The Cyber Security Defender will have a range of responsibilities, including but not limited to: deploying as part of the Rapid Response Team (RRT) on short notice, setting up and operating cyber defense equipment in various environments; conducting host-based and network-based analyses to identify indicators of compromise; supporting incident triage, containment, and remediation actions; installing and maintaining RRT toolsets such as EDR and SIEM; performing log analysis and data correlation to support threat detection; and assisting in threat hunting activities. For the Senior Cyber Security Defender role, additional responsibilities include leading RRT personnel during cyber operations, overseeing incident response processes, and conducting post-incident reviews to improve RRT capabilities.

Required Qualifications:
Candidates must possess a Bachelor’s degree from a nationally recognized university in a related field, along with 2 to 3 years of relevant experience. Alternatively, candidates may qualify with 6 to 10 years of extensive experience in cybersecurity-related duties if they lack a formal degree. A minimum of 2 to 6 years of experience in cybersecurity, particularly in incident response and defensive operations, is required. Candidates should have hands-on experience in detecting and responding to cyber incidents and familiarity with common attack techniques and modern threat landscapes. The ability to work effectively under pressure and collaborate in team environments is essential.

Educational Background:
A Bachelor’s degree in a relevant discipline from a recognized university is required. In exceptional cases, significant relevant experience may substitute for formal education. Candidates should demonstrate a strong foundation in cybersecurity principles and practices, as well as a commitment to continuous learning and professional development in the field.

Experience:
Candidates should have a minimum of 2 to 6 years of experience in cybersecurity, with a focus on incident response and defensive operations. Experience in enterprise or operational environments is crucial, as is familiarity with structured operational procedures and reporting processes. For the Senior Cyber Security Defender role, demonstrated experience in leading teams during cyber incidents in high-pressure situations is required.

Languages:
Fluency in English, both written and spoken, is mandatory for all candidates. Proficiency in additional languages may be considered an asset but is not required.

Additional Notes:
The position offers a 5-year contract with a competitive tax-free salary, household and children's allowances, and privileges for expatriate staff, including education allowances and additional home leave. Employees will benefit from a comprehensive private health insurance scheme, generous annual leave of 30 days plus official holidays, and participation in the NATO Pension Scheme. The NCIA is committed to equal opportunity employment and fostering an inclusive environment.