Cyber Security Defender - Network Security Tool Manager

Job Posting Organization:
The NATO Communications and Information Agency (NCIA) has been operational for over 70 years, dedicated to preserving peace and security" style="border-bottom: 1px dotted #007bff !important;">security within the NATO Alliance, which serves nearly one billion citizens. The agency employs around 3000 civilian and military staff across 29 locations in Europe, North America, and Asia. The NCIA focuses on providing the technological and cyber capabilities necessary for NATO to conduct critical operations, defend against cyber threats, and maintain superiority in various domains, including space. The organization prides itself on its diverse workforce, which reflects the unity of the Alliance, and is committed to hiring, training, and retaining top talent to maintain its technological edge.

Job Overview:
The position of Cyber Security Defender is based in Mons, Belgium, within the NATO Cyber Security Centre (NCSC). This role is pivotal as the agency embarks on transforming its IT services to support NATO's Digital Endeavour. The NCSC is responsible for the lifecycle management of cyber security, providing specialized services that encompass scientific, technical, operational, and maintenance support for NATO Communications and Information Systems (CIS). The successful candidate will be expected to administer, maintain, and continuously improve enterprise cyber defense tools that are essential for network security monitoring, threat detection, and threat hunting. The role requires a proactive approach to ensure that security platforms are reliable, effective, and aligned with NATO's security objectives.

Duties and Responsibilities:
The Cyber Security Defender will have a comprehensive set of responsibilities, including:

• Administering and maintaining enterprise cyber defense tools that support network security monitoring and threat detection.
• Acting as a subject matter expert for network visibility and security monitoring, ensuring the reliability and effectiveness of platforms.
• Delivering and maintaining network visibility and security monitoring capabilities.
• Managing the lifecycle of security monitoring platforms, including deployment, configuration, maintenance, upgrades, and decommissioning.
• Supporting the design and implementation of security monitoring solutions and integrating them with broader security operations and incident management capabilities.
• Coordinating maintenance activities and vendor support engagements, while communicating platform status, risks, and improvement opportunities.
• Engaging in on-call duties as required, including after hours, weekends, and holidays, especially during enterprise-level cyber incidents.

Required Qualifications:
Candidates must possess a Bachelor’s degree from a nationally recognized or certified university in a related discipline, along with at least 2 years of post-related experience. Alternatively, candidates without a university degree may qualify if they can demonstrate at least 6 years of extensive and progressive expertise relevant to the position. Additionally, candidates should have expert knowledge of network security monitoring and cyber defense operations, as well as extensive hands-on experience with large-scale security monitoring deployments across multiple networks and sites. Familiarity with security monitoring and packet capture platforms such as Cisco Firepower, Corelight, and NetWitness is essential, along with proven experience in platform health monitoring and operational governance.

Educational Background:
A Bachelor’s degree in a relevant field from a recognized institution is required. This educational background should ideally be complemented by practical experience in cyber security and network management. Candidates who do not possess a degree may still be considered if they can demonstrate significant relevant experience and expertise that compensates for the lack of formal education.

Experience:
The position requires a minimum of 2 years of relevant experience in cyber security and network security monitoring. However, candidates with extensive experience (at least 6 years) in related duties may also be considered if they can demonstrate their capabilities effectively. Experience should include hands-on work with security monitoring tools and platforms, as well as operational governance and troubleshooting in complex environments.

Languages:
Fluency in English, both written and spoken, is mandatory for this position. Proficiency in additional languages may be considered an asset but is not explicitly required.

Additional Notes:
This position offers a 5-year contract with a competitive tax-free salary, along with household and children's allowances. Expatriate staff may receive additional benefits such as education allowances and home leave. The role includes excellent private health insurance and generous annual leave of 30 days, in addition to official holidays. The NATO Pension Scheme is also part of the benefits package. The NCIA emphasizes its commitment to equal opportunity and fostering an inclusive work environment.