Engineer (Vulnerability Assessment) - 200116 - NATO Communications and Information Agency (NCIA) Avenue du Shape, Mons, Belgium Bookmark Share Print 348 0 2

Listing Description

APPLY HERE BEFORE 13-Mar-2020 -> https://nato.taleo.net/careersection/2/jobdetail.ftl?lang=en&job=200116

See full jobdescription here: https://www.ncia.nato.int/Documents/JD_Engineer%20(Vulnerability%20Assessment)_A2_200116.pdfPrepare, lead and conduct Vulnerability Assessments;

- Present, analyse, provide remediation advice and report on data gathered during the audits;

- Life-cycle manage supporting documentation such as auditor handbook, scoping document and

assessment spreadsheets and databases;

- Periodically conduct non-standard system audits such as ICS/SCADA;

- Participate in NCI Agency and NATO Project Working Groups (WGs) as a Subject Matter Expert (SME)

in Vulnerability Assessment procedures, supporting NCI Agency Cyber Security initiatives in this

domain;

- Compile, draft, review, develop, and provide input on all relevant aspects relating to vulnerability and

compliance scans, processes, and associated documentation;

- Perform functions to ensure that the Type 3 Security Audit Program Of Work (PoW) is conducted in

accordance with the Centralised Services SLA;

- Support NCI Agency CIS Support Units and other NATO entities and customers in the process of

vulnerability remediation;

Provide technical assistance, as required, to System Accreditation Authorities (SAAs);

- Provide required support for the selection of security tools;

- Provide training and advice to NATO wide COMPUSEC/CIS Security staff in the areas of Security

Audits;

- Provide COMPUSEC related input to NATO Directives in the Cyber Security area;

- Provide cyber defence support to NATO Exercises, which include:

 Pre-deployment configuration checks;

 Exercise planning and direction;

 Deployed system security audits and compliance checks.

- Maintain awareness of new technologies and developments within the Cyber Security area;

- When not engaged in activities linked to On-Site Vulnerability Assessment Cell duties, the incumbent

will be required to carry out managerial and technical tasks as directed by the Cyber Security

Assessment Section Head and/or the Cyber Hygiene Branch Head in support other NCSC activities;

- Brief at both executive and technical levels on Vulnerability Assessment reports and testing

outcome, including at flag officer level;

- In co-ordination with the Vulnerability Assessment Cell Head, ensure proactive collaboration and

coordination with internal and external stakeholders;

- Deputize for higher grade staff, if required;

- Performs other duties as may be required.