EMW, Inc.

Deadline Date: Friday 6 January 2023 Requirement: DevSecOps Engineer Location: Off-Site Full time on-site: No NATO Grade: A/96,580 EUR (Each sprint 4,390 EUR) Required Start Date: 30 January 2023 End Contract Date: 30 December 2023 Required Security Clearance: NATO SECRET Duties &amp; Role: 1 INTRODUCTION The NATO Communications and Information Agency (NCI Agency) has moved towards short-cyclic capability development via NATO Software Factory (NSF) services. NSF is a development and testing DevSecOps Platform hosted in Microsoft Azure Cloud, designed to enable the use of standardized secure software engineering processes and common tooling shared by Alliance Federation, Industry, Academia and Nations. NCI Agency is looking for a DevSecOps engineer with a strong background on containerization technology (compliancy and security assessment, implementing and maintaining base layers, and assist with complex containerized deployments and infrastructure as code (Terraform &amp; Ansible) to support the NSF team. 2 OBJECTIVES NCI Agency is building a NATO Trusted Container service, enabling future container-based FAS secure lifecycle management. In addition, a new Integration Testing service is being established in the NSF, replacing legacy on-prem labs and test environments. The main objective of this statement of work is to support the NST team building these two new services within the NSF. 3 SCOPE OF WORK Under the direction / guidance of the NCIA Point of Contact or delegated staff, the DevSecOps engineer will support building the NATO Trusted Container service and Integration Testing service. This includes the following activities: <ul> <li>Develop / update Jenkins and Azure DevOps pipelines</li> <li>Implement security scanning for containers</li> <li>Implement compliancy scanning for containers</li> <li>Develop and maintain secure common base layers for containers, including applying required hardening settings</li> <li>Develop / maintain infrastructure as code for deployment and configuration of infrastructure (VMs, Disks), core services (AD, CA, Exchange etc.), and applications (NATO and Commercial Application)</li> <li>Define standard for infrastructure as code</li> <li>Create pipelines and self-service solutions for deploying test environments using infrastructure as code</li> </ul> The contractor will be part of a team and will give the service using an Agile and iterative approach during multiple sprints. Each sprint is planned for a duration of 1 week. The content and scope of each sprint will be agreed during the sprint-planning meeting. 4 DELIVERABLES AND PAYMENT MILESTONES The following deliverables are expected from the service on this statement of work: Deliverable 01: 22 sprints of software development. NTE Sprint Cost: 4,390 EUR Number of Sprints: 22 NTE Total Cost: 96,580 EUR Payment Milestones: Upon completion of each fourth sprint and at the end of the service. The NCIA team reserves the possibility to exercise a number of options, based on the same scrum deliverable timeframe and cost, at a later time, depending on the project priorities and requirements 5 COORDINATION AND REPORTING The contractor shall participate in daily status update meetings, sprint planning, sprint retrospectives and other meetings, physically in the office, or in person via electronic means using Conference Call capabilities, according to Service Delivery Manager’s instructions. For each sprint to be considered as complete and payable, the contractor must report the outcome of his/her service during the sprint, first verbally during the retrospective meeting and then in written within three (3) days after the sprint’s end date. The format of this report shall be a short email to the NCIA Point of Contact mentioning briefly the service held and the development achievements during the sprint. 6 SCHEDULE This task order will be active immediately after signing of the contract by both parties. It is expected the initial service starts on 30th January 2023 and will end no later than 31 December 2023. 7 CONSTRAINTS All the deliverables provided under this statement of work will be based on NCI Agency templates or agreed with the point of contact. All work, artefacts, scripts, documentation, etc. will be stored under configuration management and/or in the provided NCI Agency tools. All the deliverables of this project will be considered NATO UNCLASSIFIED Part of the service may involve handling sensitive data, therefore, a security clearance at the right level is expected for the contractor(s) undertaking this service. 8 PRACTICAL ARRANGEMENTS The contractor will be required to provide the service off site. Access to the NCI Agency NSF platform will be provided in coordination with the NCIA Point of Contact or delegated staff. The contractor may be required occasionally to travel to NCI Agency sites within NATO for completing these tasks. Travel expenses will be reimbursed to the individual directly (outside this contract) under NATO rules. This service must be accomplished by ONE contractor.Requirements9 QUALIFICATIONS The consultancy support for this service requires a software developer with the following qualifications: <ul> <li>The candidate must have a currently active NATO SECRET security clearance</li> <li>The candidate has relevant and recent experience in building and securing containers.</li> <li>The candidate has relevant and recent experience in developing infrastructure as code</li> <li>The candidate has a strong track record in DevSecOps and has strong problem solving skills.</li> <li>The candidate has extensive and recent experience with and knowledge of Continuous integration and delivery, including the following tools and technologies and concepts: <ul> <li>Git (mandatory), </li> <li>Ansible (mandatory), </li> <li>Docker (mandatory), </li> <li>Jenkins (mandatory), </li> <li>Terraform (mandatory), </li> <li>Infrastructure as Code such as ARM, </li> <li>Designing and implementing build/deploy pipelines, </li> <li>Application security/code quality testing tools such as SonarQube, Checkmarx or OWASP Dependency Check, </li> <li>Shift left/right testing using test automation tools such Junit/NUnit, Selenium, Protractor, Cucumber</li> </ul> </li> <li>The candidate has extensive and recent experience with and knowledge of Continuous Operations, including the following tools and technologies and concepts: <ul> <li>Kubernetes (mandatory), </li> <li>Telemetry/Monitoring solutions such as Application Insights, Azure Monitor or Prometheus, </li> <li>Helm, </li> <li>Container Registry, </li> <li>Container vulnerability scanning tools such as Trivy and Anchore, </li> </ul> </li> <li>The candidate has experience with and knowledge of Java and NodeJS/JavaScript</li> <li>The candidate has relevant and recent experience in using development tools (e.g. Maven, Jira, GitLab, Zephyr) and the Scrum methodology.</li> <li>The candidate has strong customer relationship skills, including negotiating complex and sensitive situations under pressure.</li> <li>The candidate is able to speak and write fluent English since the service is conducted in English.</li> <li>The candidate must have the nationality of one of the NATO nations.</li> </ul>

The Hague

2022-0121 DevSecOps Engineer (NS) - THU 6 Jan OFF-SITE

Deadline Date: Friday 6 January 2023 Requirement: Cloud SOC Analyst Location: Off-Site Full time on-site: No NATO Grade: A/87,230 EUR (Each sprint 3,965 EUR) Required Start Date: 30 January 2023 End Contract Date: 30 December 2023 Required Security Clearance: NATO SECRET Duties &amp; Role: 1 INTRODUCTION The NATO Communications and Information Agency (NCI Agency) has moved towards short-cyclic capability development via NATO Software Factory (NSF) services. NSF is a development and testing DevSecOps Platform hosted in Microsoft Azure Cloud, designed to enable the use of standardized secure software engineering processes and common tooling shared by Alliance Federation, Industry, Academia and Nations. NCI Agency is looking for a Cloud SOC Analyst to act as a cybersecurity first responder and execute daily security operations duties for the NSF platform and its customers. 2 OBJECTIVES The main objective of this statement of work is in relation to the security operations activities for the NATO Software Factory. 3 SCOPE OF WORK Under the direction / guidance of the NCIA Point of Contact or delegated staff, the Cloud SOC Analyst will run daily security operations activities: <ul> <li>Monitoring</li> <li>Detection and response</li> <li>Threat Hunting</li> <li>Event and incident response</li> <li>Continuity of Operations</li> </ul> The Cloud SOC Analyst will also contribute and support enhancements work-packages related to the NSF platform security posture and SOC Operations on the main pillars (organizational, people, processes and technology). The contractor will be part of the NSF team and will provide the service using an Agile and iterative approach during multiple sprints. Each sprint is planned for a duration of 1 week. The content and scope of each sprint will be agreed during the sprint-planning meeting. 4 DELIVERABLES AND PAYMENT MILESTONES The following deliverables are expected from the service on this statement of work: Deliverable 01: 22 sprints of security operations and security enhancements activities. NTE Sprint Cost: 3,965 EUR Number of Sprints: 22 NTE Total Cost: 87,230 EUR Payment Milestones: Upon completion of each fourth sprint and at the end of the service. The NCIA team reserves the possibility to exercise a number of options, based on the same scrum deliverable timeframe and cost, at a later time, depending on the project priorities and requirements 5 COORDINATION AND REPORTING The contractor shall participate in daily status update meetings, sprint planning, sprint retrospectives and other meetings, physically in the office, or in person via electronic means using Conference Call capabilities, according to Service Delivery Manager’s instructions. For each sprint to be considered as complete and payable, the contractor must report the outcome of his/her service during the sprint, first verbally during the retrospective meeting and then in written within three (3) days after the sprint’s end date. The format of this report shall be a short email to the NCIA Point of Contact mentioning briefly the service held and the development achievements during the sprint. 6 SCHEDULE This task order will be active immediately after signing of the contract by both parties. It is expected the initial service starts on 30th January 2023 and will end no later than 31 December 2023. 7 CONSTRAINTS All the deliverables provided under this statement of work will be based on NCI Agency templates or agreed with the point of contact. All work, artefacts, scripts, documentation, etc. will be stored under configuration management and/or in the provided NCI Agency tools. All the deliverables of this project will be considered NATO UNCLASSIFIED Part of the service may involve handling sensitive data, therefore, a security clearance at the right level is expected for the contractor(s) undertaking this service. 8 PRACTICAL ARRANGEMENTS The contractor will be required to provide the service off site. Access to the NCI Agency NSF platform will be provided in coordination with the NCIA Point of Contact or delegated staff. The contractor may be required occasionally to travel to NCI Agency sites within NATO for completing these tasks. Travel expenses will be reimbursed to the individual directly (outside this contract) under NATO rules. This service must be accomplished by ONE contractor.Requirements9 QUALIFICATIONS The consultancy support for this service requires a Cloud SOC Analyst with the following qualifications: <ul> <li>The candidate must have a currently active NATO SECRET security clearance</li> <li>The candidate has a strong record of accomplishments in cloud security operations.</li> <li>The candidate has a broad understanding of cybersecurity best practices, techniques and tools, attack vectors, cyber threats.</li> <li>The candidate has relevant key soft skills such as collaboration, problem solving, critical thinking, inquisitive mind and ability to work under pressure.</li> <li>The candidate has extensive understanding of information technologies including networks and protocols.</li> <li>The candidate has strong relevant skills and experience with cloud security operations at tactical level: <ul> <li>Security incidents analysis and triage, </li> <li>Security incident response, </li> <li>Security incident recovery, </li> <li>Threat Hunting</li> </ul> </li> <li>The candidate has experience with and deep knowledge on the use of various cloud SOC tools and services: <ul> <li>Microsoft Sentinel, </li> <li>Microsoft Defender for Cloud, </li> <li>Microsoft Defender(s) (M365, Endpoint, Identity, Cloud Apps), </li> <li>Azure and M365 Logging and Monitoring, </li> <li>Endpoint detection and response (EDR) solution, </li> <li>Azure Information Protection, </li> <li>Azure Active Directory Identity Protection, </li> <li>Microsoft Purview Compliance Manager, </li> <li>Kusto Query language (KQL), </li> <li>Other security tools</li> </ul> </li> <li>The candidate has experience with Microsoft 365 and Azure services and tools: <ul> <li>Azure Active Directory, </li> <li>Application gateways, </li> <li>Azure policies, </li> <li>Azure automation accounts, </li> <li>Azure Network Security Groups, </li> <li>Azure DDoS protection</li> </ul> </li> <li>The candidate has experience with Windows and Linux operating systems.</li> <li>The candidate has strong customer relationship skills, including negotiating complex and sensitive situations under pressure.</li> <li>The candidate is able to speak and write fluent English since the service is conducted in English.</li> <li>The candidate must have the nationality of one of the NATO nations.</li> </ul>

2022-0122 Cloud SOC Analyst (NS) - FRI 6 Jan OFF-SITE

Deadline Date: Friday 5 August 2022 Requirement: Services Security Contractor Location: The Hague, NL Full time on-site: Yes NATO Grade: A/98 Total Scope of the request (hours): 240 Required Start Date: 1 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Duties and Role: 1. Professional Services Consultancy is required for AMDC2 systems and NISP project: 1.1. Consultancy for DISA-STIG and OpenScap implementation on Oracle Linux 8, priority one: Implement a protection profile based on OpenScap and (preferably) DISA-STIGs for OL standalone and full server including protection profile enforcement, update, reporting, and customisation. Min skill for the task: Hands-on experience in writing structured and well documented test suites using PyTest and Gherkin. 1.2. Command-Line Test Automation with PyTest framework and Gherkin (behaviour driven testing) consultancy, priority two: Create a robust suite of automated test cases for the NISP command line tools on Solaris 11.4 and Oracle Linux 8. The test framework used is PyTest, and the test cases will be written in Gherkin. Min skill for the task : Hands-on experience with configuring FreeIPA, customising FreeIPA, resolving FreeIPA bugs 1.3. Consultancy for FreeIPA, priority three: Secure configuration of FreeIPA, understand Do's and Don'ts of FreeIPA, resolution of some tasks affecting FreeIPA (such as the site adaptation). Min skill for the task: Hands-on experience with the implementation of protection profiles using the OpenScap suite and using DISASTIGs as input. Consultant shall have hands-on experience in implementing customisations to protection profiles, such as allowing the end-user to turn certain settings on and off. Consultant shall have hands-on experience in updating protection profiles, reporting on protection status, fixing issues with protection profiles. 1.4. Any other task related to NISP software.RequirementsSkill, Knowledge &amp; Experience: <ul> <li>The candidate must have a currently active NATO SECRET security clearance.</li> <li>University degree in computer science or a comparable field of study, ideally with a security focus.</li> <li>Hands on experience in Red Hat and/or Oracle Linux security (for example, Kernel hardening, Linux permissions, capabilities, namespaces, secure RPC).</li> <li>Extensive experience (at least 5-10 years) with RHEL (or derivatives) administration, including RHEL8</li> <li>Proven experience in consultancy of RHEL8 system hardening and security uplift.</li> <li>Experience in software development methodologies, configuration control and management</li> <li>Deep knowledge and experience in Red Hat and Oracle Linux distributions.</li> <li>Fluent in English.</li> </ul>

SC2022-002321 Services Security Contractor (NS) - FRI 5 Aug

Apply to Cyber Security Jobs in The Hague in companies remotely and near you. New Cyber Security Jobs in The Hague added daily.

Job Position and Company	Location	Tags	Posted
2022-0121 DevSecOps Engineer (NS) - THU 6 Jan OFF-SITE at EMW, Inc.	Remote Manager Devsecops Full Time Contract
2022-0122 Cloud SOC Analyst (NS) - FRI 6 Jan OFF-SITE at EMW, Inc.	Remote Soc Analyst Analyst Manager Incident Response
SC2022-002321 Services Security Contractor (NS) - FRI 5 Aug at EMW, Inc.	Automation Clearance Linux NATO Oracle

Cyber Security Jobs in The Hague

0 Cyber Security Jobs in The Hague. Page 1 of 1

3 closed cyber security jobs in the hague:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Cyber Security Jobs in The Hague

0 Cyber Security Jobs in The Hague. Page 1 of 1

3 closed cyber security jobs in the hague:

Subscribe to the weekly Cyber Security Jobs Newsletter

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter