Overview
Support NATO entities and customers in vulnerability remediation, communicate security risks, and develop security guidelines for operating systems, cloud services, and container security.
Key Responsibilities
- Support NCIA CIS Support Units and other NATO entities and customers in the process of vulnerability remediation;
- Communicate security risks and issues to business managers and others;
- Follow standard approaches for the technical assessment of information systems against information assurance policies and business objectives;
- Develop and manage Security Hardening, Configuration and Installation guidelines in the following areas: UNIX/Linux Operating system and Linux based applications; Cloud Management and Services; Containers security and DevSecOps pipeline.
- Provide CIS Security related input to NATO Directives in the Cyber Security area;
- Review documents to be published on NCSC Portals, or provided to NCSC customers, as part of projects deliverables.
Required Experience
- 2 years post-related experience with a Bachelor’s degree in a related discipline.
- Exceptionally, at least 6 years extensive and progressive expertise in duties related to the function of the post in lieu of a university degree.
- At least 2 years practical experience working in cybersecurity or a related field, such as information technology, network administration, or software development;
- Extensive knowledge of Cloud System Security Services and Configuration;
- Experience in modern CIS secure deployment and configuration troubleshooting;
- Extensive experience in the contextual interpretation of Vulnerability Assessments results;
- Excellent communication skills with respect to briefing/presenting, report writing & mediation;
- Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences.
Qualifications
- A Bachelor’s degree at a nationally recognised/certified University in a related discipline.
- Recognized professional training/qualification from industry leading vendors such as Microsoft, VMWare, CISCO, Oracle, RedHat, Amazon etc.;
