EMW, Inc.

Deadline Date: Tuesday 16 August 2022 Requirement: Penetration Testing Services Location: Mons, BE Full time on-site: Yes NATO Grade: A3/115 Total Scope of the request (hours): 570 Required Start Date: 19 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Duties and Role: The duties of the individual mainly focus on: <ul> <li>Provide Web and application level penetration testing;</li> <li>Provide security design reviews to ensure compliance with NATO policies and directives;</li> <li>Provide security consultancy and advice to projects, plans, and other entities;</li> <li>Brief at technical levels on security reports and testing outcome.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul><li>The candidate must have a currently active NATO SECRET security clearance.</li></ul>The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:<ul> <li>Web application and thick-client penetration testing;</li> <li>Assessing security vulnerabilities within OS, software, protocols &amp; networks;</li> <li>Researching and evaluating security products &amp; technologies;</li> <li>Knowledge in system and network administration of UNIX and Windows systems;</li> <li>Use of penetration testing tools, techniques, and recognized testing methodologies;</li> <li>Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);</li> <li>Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies;</li> <li>Ability to evaluate risks and formulate mitigation plans;</li> <li>Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan.</li> </ul>

Mons

SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug

Deadline Date: Friday 12 August 2022 Requirement: Cyber Security Endpoint Engineer Location: Mons, BE Full time on-site: Yes NATO Grade: A/88 Total Scope of the request (hours): 570 Required Start Date: 12 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Specific Working Conditions: Normal Office Conditions. Exceptionally may be required to work outside of normal working hours or on a shift system for a limited period due to urgent operational needs such as support of delivery of critical services, major cyber incidents and other emergency scenarios Duties and Role: The contracted individual must be able to perform effectively and efficiently with minimal supervision. The contracted individual will be asked to support the development of one or more technical deliverables and/or provide support to projects and exercises. The duties of the individual mainly focus on: <ul> <li>Maintenance of the existing, supported, endpoint security products.</li> <li>Development of new security guides and configuration related to endpoint protection products like antimalware, Data Loss Prevention, application whitelisting and full drive encryption.</li> <li>Provide technical support to the NCSC, mainly remotely through email or telephone, over endpoint protection technologies.</li> <li>Maintain up to date the NCSC repository related to security guides.</li> <li>Test endpoint protection products during their lifecycle (new versions, patches) and with different configurations.</li> <li> Support and follow up the requests for change (RFC) for the endpoint protection products.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: Mandatory <ul> <li>The candidate must have a currently active NATO SECRET security clearance.</li> <li>Extensive practical experience with McAfee product suite</li> <li> Expert level and previous experience with (referred later as McAfee products):<ul> <li>McAfee Data Loss Prevention </li> <li>McAfee Application and Change Control</li> <li>McAfee File and Removable Media Protection (FRP)</li> <li>McAfee ePolicy Orchestrator</li> </ul> </li> <li>Prior experience in maintenance, operations and troubleshooting of McAfee products</li> <li>Managing the life cycle of McAfee products:<ul> <li>Tracking and testing new releases</li> <li>Updating and managing the current configuration to ensure best industry standards and organisational security requirements are met</li> <li>Updating the current documentation</li> <li>Co-ordinate and support implementation of required changes.</li> <li>Lead the change management process.</li> </ul> </li> <li>Support troubleshooting of McAfee products across the enterprise</li> <li>Develop documentation and configuration for McAfee products</li> <li>Liaise with vendor and provide third level support</li> <li>Practical hands-on experience in systems and tools administration.</li> <li>Comprehensive knowledge of the principles of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications.</li> <li>Troubleshooting of Linux and/or Windows infrastructures.</li> <li>Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams.</li> <li>Demonstrable ability to work autonomously and proactively, to understand the NCSC chain of command and to follow internal processes</li> </ul> Desirable The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas: <ul> <li>McAfee endpoint protection products like antimalware, Data Loss Prevention, application whitelisting and full drive encryption; including proven records of deliverables.</li> <li>Maintenance and administration of email protection products (such as Symantec Mail Security).</li> <li>Testing and validating that contracted deliverables meet the requirements and fulfil the intended use-cases.</li> <li>Good understanding of the constraints related to IT systems on NATO networks</li> <li>Experience with implementation projects within NATO and/or National military organizations</li> </ul>

C002329 Cyber Security Endpoint Engineer (NS) - FRI 12 Aug

Deadline Date: Tuesday 16 August 2022 Requirement: Security Firewall Engineer Location: Mons, BE Full time on-site: Yes NATO Grade: A/97 Total Scope of the request (hours): 570 Required Start Date: 12 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Specific Working Conditions: The work will be executed on site at the NCI Agency offices in Mons, Belgium, in a normal office environment with standard working hours. Exceptionally there might be requirements to perform out-of-hours work to support planned maintenance activities or delivery of critical services. Duties and Role: Under the direction of Section Head, Gateway Security Services, the Secuirty Firewall Engineer will perform duties such as, but not limited to, the following: <ul> <li>Support the Centralised SLA and project activities in all areas of network and security devices, such as<ul> <li>Central administration of Boundary Protection and Gateway services</li> <li>System staging and configuration</li> <li>Firewall policy development</li> </ul> </li> <li>Management, maintenance and configuration of appliances and software applications for Gateway Security systems, including network security devices such as firewalls and data diodes to ensure continuing functionality and availability.</li> <li>Provide technical support in troubleshooting infrastructure and operational issues and collaborating with other teams for a successful resolution;</li> <li>Perform the analysis, design, implementation and maintenance of authorised changes, related to Gateway Security Systems and the integration/tailoring of vendor supplied components, following established procedures for quality, configuration control, testing, documentation and security;</li> <li>Collaborate with the Infrastructure Management and other Cyber Security teams</li> <li>Provide assistance to Incident Handlers to identify and remediate security incidents</li> <li>Review security documentation and provide technical advice, when requested</li> <li>Perform other duties as may be required.</li> </ul>RequirementsSkill, Knowledge &amp; Experience: <ul><li>The candidate must have a currently active NATO SECRET security clearance.</li></ul>The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:<ul> <li>Palo Alto Networks Firewalls and Palo Alto Networks Panorama for Enterprise level deployments</li> <li>Firewall installation and management of other vendors</li> <li>Other Boundaries Protections Devices such as mail gateways or data diodes</li> <li>Computer and Networks Security principles, procedures and technologies.</li> <li>Wide and local area networks and components (switches, routers)</li> <li>LAN/WAN networking including protocol network architecture, and the vulnerabilities of modern operating systems and applications</li> <li>Troubleshooting TCP/IP networks, Linux and/or Windows infrastructures to identify problems</li> <li>TCP/IP protocols and services </li> <li>UNIX and Microsoft Operating system </li> <li>Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams</li> </ul>In addition to the above, it is desirable for the contracted individual to have working experience and knowledge in the following areas: <ul> <li>Deploying Palo Alto Network Threat Prevention on Enterprise level.</li> <li>Scripting (Python, Shell scripting, PowerShell).</li> <li>Understanding of Information Security Practices; relating to the Confidentiality, Integrity and Availability of information (CIA triad.)</li> <li>Previous work in an international environment comprising both military and civilian elements.</li> <li>Possession of Industry leading certification in the area of Cybersecurity such as CISSP, CISM, MCSE/S, CISA, GSNA, SANS GIAC.</li> </ul>

C002331 Security Firewall Engineer (NS) - TUE 16 Aug

Deadline Date: Tuesday 9 August 2022 Requirement: Penetration Testing Services Location: Off-Site Full time on-site: No NATO Grade: A/115 Total Scope of the request (hours): 375 Required Start Date: 5 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Specific Working Conditions: Work from home on a part time basis for 5 months of effort based on 75 hours per month.Duties and Role<ul> <li>Provide Web and application level penetration testing; </li> <li>Provide security design reviews to ensure compliance with NATO policies and directives;</li> <li>Provide security consultancy and advice to projects, plans, and other entities; </li> <li>Brief at technical levels on security reports and testing outcome. </li> </ul>Requirements<ul><li>NATO Secret security clearance</li></ul>The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas: <ul> <li>Web application and thick-client penetration testing; </li> <li>Assessing security vulnerabilities within OS, software, protocols &amp; networks; </li> <li>Researching and evaluating security products &amp; technologies;</li> <li>Knowledge in system and network administration of UNIX and Windows systems;</li> <li>Use of penetration testing tools, techniques, and recognized testing methodologies; </li> <li>Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);</li> <li>Experience in security mechanisms (applocker, deviceguard), .NET, appliance</li> <li>Experience in reverse, Kerberos (windows), thin client application</li> <li>Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies; </li> <li>Ability to evaluate risks and formulate mitigation plans; </li> <li>Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan. </li> </ul>

Belgium

SC2022-002289 Penetration Testing Services (NS) - TUE 9 Aug

Deadline Date: Friday 5 August 2022 Requirement: Services Security Contractor Location: The Hague, NL Full time on-site: Yes NATO Grade: A/98 Total Scope of the request (hours): 240 Required Start Date: 1 September 2022 End Contract Date: 31 December 2022 Required Security Clearance: NATO SECRET Duties and Role: 1. Professional Services Consultancy is required for AMDC2 systems and NISP project: 1.1. Consultancy for DISA-STIG and OpenScap implementation on Oracle Linux 8, priority one: Implement a protection profile based on OpenScap and (preferably) DISA-STIGs for OL standalone and full server including protection profile enforcement, update, reporting, and customisation. Min skill for the task: Hands-on experience in writing structured and well documented test suites using PyTest and Gherkin. 1.2. Command-Line Test Automation with PyTest framework and Gherkin (behaviour driven testing) consultancy, priority two: Create a robust suite of automated test cases for the NISP command line tools on Solaris 11.4 and Oracle Linux 8. The test framework used is PyTest, and the test cases will be written in Gherkin. Min skill for the task : Hands-on experience with configuring FreeIPA, customising FreeIPA, resolving FreeIPA bugs 1.3. Consultancy for FreeIPA, priority three: Secure configuration of FreeIPA, understand Do's and Don'ts of FreeIPA, resolution of some tasks affecting FreeIPA (such as the site adaptation). Min skill for the task: Hands-on experience with the implementation of protection profiles using the OpenScap suite and using DISASTIGs as input. Consultant shall have hands-on experience in implementing customisations to protection profiles, such as allowing the end-user to turn certain settings on and off. Consultant shall have hands-on experience in updating protection profiles, reporting on protection status, fixing issues with protection profiles. 1.4. Any other task related to NISP software.RequirementsSkill, Knowledge &amp; Experience: <ul> <li>The candidate must have a currently active NATO SECRET security clearance.</li> <li>University degree in computer science or a comparable field of study, ideally with a security focus.</li> <li>Hands on experience in Red Hat and/or Oracle Linux security (for example, Kernel hardening, Linux permissions, capabilities, namespaces, secure RPC).</li> <li>Extensive experience (at least 5-10 years) with RHEL (or derivatives) administration, including RHEL8</li> <li>Proven experience in consultancy of RHEL8 system hardening and security uplift.</li> <li>Experience in software development methodologies, configuration control and management</li> <li>Deep knowledge and experience in Red Hat and Oracle Linux distributions.</li> <li>Fluent in English.</li> </ul>

The Hague

SC2022-002321 Services Security Contractor (NS) - FRI 5 Aug

Apply to NATO Cyber Security Jobs in companies remotely and near you. New NATO Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
SC2022-002328 Penetration Testing Services (NS) - TUE 16 Aug at EMW, Inc.	Full Time Contract Application Security Windows BASH
C002329 Cyber Security Endpoint Engineer (NS) - FRI 12 Aug at EMW, Inc.	Remote Full Time Contract Windows Clearance
C002331 Security Firewall Engineer (NS) - TUE 16 Aug at EMW, Inc.	CISM Full Time Contract Windows CIA
SC2022-002289 Penetration Testing Services (NS) - TUE 9 Aug at EMW, Inc.	Remote Part Time Full Time Contract Windows
SC2022-002321 Services Security Contractor (NS) - FRI 5 Aug at EMW, Inc.	Automation Clearance Linux NATO Oracle

NATO Cyber Security Jobs

0 NATO Cyber Security Jobs. Page 1 of 1

5 closed nato cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

NATO Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

NATO Cyber Security Jobs

0 NATO Cyber Security Jobs. Page 1 of 1

5 closed nato cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

NATO Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter