Cybersecurity Endpoint Engineer

Spektrum supports apex purchasers (NATO UN EU and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services specialised aerospace and defence sales delivery and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATOs member countries and its partners. The agency was established in 2012 and is headquartered in Brussels Belgium.

The NCIA provides a wide range of services including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATOs communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATOs military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATOs mission to detect deny and defeat threats to its communication networks.
• Information Management: The NCIA manages NATOs information technology infrastructure including its databases applications and servers.

Overall the NCIA plays a critical role in ensuring the security and effectiveness of NATOs communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATOs principal C3 capability deliverer and CIS service provider. It provides maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV and when required stand together in the face of attack under Article V.

To provide these critical services in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorises: NATO International Civilians (NIC)s Military (Mil) and Interim Workforce Consultants (IWC)s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID 2024-0279

Role Background

NATO Cyber Security Centre (NCSC) is looking for workforce to support the work of Enable Branch: to ensure the availability performance and security of NATOs data centre across multiple sites. Focus will be on setting up software or hardware to make it operational and providing technical expertise in compliance with NATOs operational requirements and security standards. Currently endpoint devices are managed through fragmented systems with manual processes leading to inconsistent updates inefficiencies and security vulnerabilities across the organization.

Role Duties and Responsibilities

• Expert guidance on the Deployment and Configuration of Endpoint Security Solutions - ensuring successful deployment setup and configuration of Trellix Endpoint Security (formerly McAfee) solutions across all NATO workstations mobile devices and servers. This includes ensuring that all endpoints are integrated with NATOs larger security infrastructure.
• Endpoint Management and Optimization - managing and optimizing endpoint security solutions to maintain compliance with NATOs cybersecurity policies. This includes regularly reviewing and improving configurations to meet security and performance standards.
• Monitoring and Defence against Cyber Threats - Providing ongoing monitoring of all endpoints to detect vulnerabilities and potential security breaches. Implement real-time defence mechanisms to safeguard against emerging threats and maintain robust security measures.
• Vulnerability Management and Threat Remediation - Identifying monitoring and remediating vulnerabilities across the endpoint landscape. Ensuring that detected vulnerabilities are addressed in a timely manner and documented according to NATOs security protocols.
• Service Level Agreement (SLA) Compliance - Ensuring all activities related to endpoint security including deployments monitoring and incident response are performed within the defined Service Level Agreements (SLAs) and contractual obligations.
• Compliance with Cybersecurity Policies - Maintaining and enforcing adherence to NATOs cybersecurity policies ensuring that all endpoints are secure and compliant with organizational security protocols.
• Expert technical assessments and audits of the endpoint security infrastructure - identifying areas for improvement and overall operational efficiency with a focus on aligning with industry best practices and NATOs security and operational requirements.
• Inclusion of Multi-Factor Authentication (MFA) and Yubikeys user integration for endpoint access and identify management
• Microsoft Endpoint Configuration Manager (MECM /SCCM) proficiency for patching deployment and security configuration enforcement.
• Reinforcement of automation capabilities in patch management compliance reporting and scalability planning.

Essential Skills Experience and Certifications

• English Language Proficiency
• Minimum 5 in endpoint management and cybersecurity well-versed in supporting NATO networks within a Cyber Security Centre.
• Demonstrated proficiency in managing centralized endpoint solutions and automating workflows in highly secure environments.
• Trellix Expertise: Proficient in managing Trellix (formerly McAfee Enterprise) cybersecurity solutions including Endpoint Detection and Response (EDR) which is crucial for monitoring and mitigating threats across NATOs secure networks.
• Minimum 2 years of NATO-Specific Experience: Extensive experience with NATOs network security protocols including managing endpoint security and ensuring adherence to NATOs strict compliance and data protection standards.
• Proficiency in Automation and Scalability: Developed automated workflows for endpoint provisioning and patch management reducing manual workload and increasing operational efficiency while maintaining security compliance within NATO environments.
• 5 years expertise in deploying configuring managing and optimizing Trellix Endpoint Security solutions including:
  • Endpoint Detection & Response (EDR)
  • Threat Prevention
  • Data Loss Prevention (DLP)
  • Drive Encryption
  • Application Control
  • Trellix ePolicy Orchestrator (eP (MFA) solutions including Yubikeys integration.

• Minimum 2 years of NATO-specific experience familiar with NATO protocols and compliance standards.
• Knowledge / expertise in automation and scalability skills with patch management and endpoint provisioning.

Desirable Skills and Experience

• Experience in project management and coordination of endpoint security infrastructure deployments.
• Ability to manage project timelines coordinate with multiple stakeholders and ensure adherence to best practices.
• Experience in Agile delivery frameworks including sprint planning review and iteration cycles.
• Familiarity with NATO compliance tooling and incident reporting standards.

Working Location

• Mons Belgium

Working Policy

• On-site

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance