Vacancy Number: A03/0516. Post Number: OCG COX Job Title: Engineer (Information Assurance) NATO Grade: A-2

Transcription

1 Vacancy Number: A03/0516 Post Number: OCG COX 0030 Job Title: Engineer (Information Assurance) NATO Grade: A-2 Basic Monthly Salary (12 x per year): 5 102,13, tax free Closing Date: 15 July 2016 Duration of contract: Serving staff members will be offered a contract according to the NATO Civilian Personnel Regulations (NCPR). Newly recruited staff will be offered a definite duration contract of three years normally followed by an indefinite duration contract. GENERAL BACKGROUND: The NATO CIS Group conducts CIS operational planning and provides deployed/deployable CIS services and support in support of NATO military operations and exercises. The NATO CIS Group is located at the Supreme Headquarters Allied Powers Europe (SHAPE) the Headquarters of Allied Command Operations (ACO), one of the two major military commands of the North Atlantic Treaty Organisation (NATO). POST DESCRIPTION: Location: Casteau/Mons, 60 Km south of Brussels (Belgium) Division: J-2/6 POST CONTEXT The NATO CIS Group conducts CIS operational planning and provides deployed/deployable CIS services in support of NATO military operations and exercises. The J2/J6 Division is the coordination authority for FAS requirements and Information Assurance & Cyber Defence issues. The J2/J6 Information Assurance Branch is the co-ordinating authority for Information Assurance issues for the NATO CIS Group. Within the Information Assurance and Cyber Defence Branch the incumbent will be responsible for the provision of Information Assurance (IA) and Cyber Defence (CD) Engineering support to the overall NATO CIS Group. He will be responsible for the technical coordination of security incident information across the NATO CIS Group and will coordinate the technical aspects of the Accreditation process required of the NATO CIS Group in support of the NATO Accreditation process. REPORTS TO Branch Head (Information Assurance), OCG COX PRINCIPAL DUTIES The incumbent s duties are: 1

2 (1) Supports the expeditious support services to resolve computer security incidents that occur on CIS throughout the NATO CIS Group. (2) Supports the NATO CIS Group operational Information Assurance and Cyber Defence programme. (3) Supports the implementation of computer and network security projects at all sites within the NATO CIS Group AOR in co-ordination with Host Nation(s), C&I Agency and Strategic Commands. (4) Supports the NATO CIS Group Information Assurance and Cyber Defence situational awareness programme and ensures that relevant internal and external authorities receive necessary security incident information. (5) Supports the delivery of Information Assurance/Cyber Defence (IA/CD) training and awareness presentations to the NATO CIS Group. (6) Provision of security awareness material for the NATO CIS Group. (7) Ensuring NATO CIS Group wide provision of training and advice to IA /CD staff regarding the employment of approved VA security tools. (8) Ensuring full IA/CD support to NATO Exercises, which includes: - Pre-Deployment configuration check. - Exercise planning and direction. (9) Initiating and contributing to NATO's Cyber Defence Exercise Planning activities, which includes: - Exercise IA/CD support. - Participation in exercises. - Planning and execution of the NATO CIS Group aspects of Information Assurance and Cyber Defence Exercises. (10) Provides Accreditation support for NATO CIS Group inputs into the NATO CIS Accreditation process. (11) Planning of material and human resources. (12) Provides technical guidance and support in the areas of: CIS Security Architecture, Disaster Recovery & Backup, Business Impact analysis, Risk Assessment and Management, Technical Documentation and New Technologies. (13) Technical Validation of IA/CD Requirements; Provides Level 3 - Engineering support in solving technical issues; Contributes to Reports on Threats Assessment. (14) Provides technical guidance and technical support for DCM Security Design and Management. (15) Ensures coherence of Operational Requirements between Static and Deployable environments. (16) Provides technical guidance and technical support for DCM Security Design and Management. (17) Represents NCISG J2 at NATO Meetings; Liaises with other related NATO organizations. Legal authority is held: None Budget authority is held: None Decision authority is held: None Supervisory duties: Maintaining and adjusting work schedules. Leading the execution of Information Assurance and Cyber Defence Exercise and Awareness activities. There are no first line reporting responsibilities. ADDITIONAL DUTIES - The incumbent may be required to undertake deployments in support of military operations and exercises, and/or TDY assignments, both within and without 2

3 NATO boundaries. Such operational deployment may exceed 30 days duration up to 183 days in any period of 547 days, and may be on short notice. For NATO International Civilian Staff, acceptance of an employment contract linked to this post constitutes agreement to deploy in excess of 30 days if required. - Maintain current knowledge of IA/CD; Participates in Security Working Group meetings and -Service Delivery monitoring; Contributes to the development of Information Assurance Policies and Strategy Development Divisional Security Officer for NCISG HQ. The employee may be required to perform a similar range of duties elsewhere within the organisation at the same grade without there being any change to the contract. QUALIFICATIONS ESSENTIAL QUALIFICATIONS 1. Professional/Experience a. Experience and training in testing and analyzing security vulnerabilities of Systems, Networks, BPS and websites. b. Work experience and formal training in design of INFOSEC perimeter defence solutions. c. Experience in Network (TCP/IP) Engineering and secure network design. d. Work experience and training in intrusion/incident Detection, Prevention and Incident handling. e. Knowledge of Cryptography Technologies including PKI techniques. f. Comprehensive knowledge of the principles of computer and communications security, networking and the vulnerabilities of modern operating systems and applications. g. Extensive experience in the analysis of threats and in the implementation and integration of INFOSEC protective measures. h. Practical technical and management experience in a computing security related post. i. Experience in INFOSEC planning for exercises and operations. j. Experience in Resource planning and management. k. Experience in project management. l. At least one year work experience in resource planning and team leading. m. Demonstrable experience in infrastructure and application based exploits. n. Experience operating as part of Cyber Defence operations center preferably in a leading role. 2. Education/Training University Degree and 2 years function related experience, or a Higher Secondary education and completed advanced vocational training leading to a professional qualification or professional accreditation with 4 years post related experience. 3. Language English SLP 3333 (Listening, Speaking, Reading and Writing) NOTE: The work both oral and written in this post and in this Headquarters as a whole is conducted mainly in English. 4. Standard Automatic Data Processing Knowledge Word Processing : Advanced Knowledge Spreadsheet : Advanced Knowledge Graphics Presentation : Working Knowledge 3

4 Database : Working Knowledge Clients/Web Browsers : Working Knowledge Web Content Management : Working Knowledge DESIRABLE QUALIFICATIONS 1. Professional/Experience Specialisations: a. Organisation, management and execution of CIS security vulnerability assessment. b. Intrusion/Incident Detection and Handling. c. Project planning and management. Specific Experience: a. Usage of simulation and security testing tools. b. Analysis of penetration testing and vulnerability assessment results. c. Planning and execution of exercises. d. Implementation and integration of INFOSEC protective measures. e. Providing CIS support/consultancy to diverse range of customers. f. Implementation of INFOSEC policies and procedures. g. Security configuration of Microsoft Windows 2003/2008 server, XP/VISTA. h. Security configuration and Administration of UNIX and Linux operating systems. 2. Education/Training a. Postgraduate level degree in CYBER Defence, Information Technology or related discipline. b. Recognized certification in Intrusion/Incident Detection and Handling. c. Professional certification in project management (PRINCE2, PMP or similar). d. Professional certification in Assurance/Cyber Defence (CISSP, GSEC, GCED or similar). e. ITIL v3 foundation. Courses: - CII-IA NATO COMPUSEC PRACTITIONERS - NATO CIS School. - NATO INFOSEC Officer Course - NATO CIS School. 3. Language N/A CIVILIAN POSTS 1. Personal Attributes Skill and experience requirements for this post are not readily available in quantity from the nations military inventory. 2. Managerial Responsibilities N/A 3. Professional Contacts Frequent contacts with executive, operational, national level and commercial staffs to discuss NATO CIS Group-wide Information Assurance and Cyber Defence related issues. Regular and frequent provision of briefings and presentations to same level and including regular presentations to senior academics and non-nato military staffs. Participation in NATO nation level working groups and committees. Maintains frequent NATO CIS Group liaison with heads of national and major commercial CERTs. Provides presentation to NATO Financial Committees for submission and justification of CIS Budgets related with NATO CIS Group IA/CD. 4

5 4. Contribution to the Objectives Directly contributes to NATO CIS Group mission to provide secure end-to-end CIS services for NATO. Ensures that the security of operational NATO CIS, reaches the required IA/CD standards as defined in NATO Security Policy and Guidance. Ensures that the computer security incidents are provided with the appropriate technical and operational support services for preventive and protective purposes. 5. Work Environment The work is normally performed in a typical Office environment. Normal Working Conditions apply. The risk of injury is categorised as: No Risk. REMARKS N/A!!PLEASE READ CAREFULLY!! HOW TO APPLY FOR A NATO CIVILIAN POST AT SHAPE: Applications for civilian employment should be made for a specific vacancy using the official shape application form that you will find with the job description of the current NATO civilian vacancies at the following address: and should be submitted exclusively electronically to rsc.recruitment@shape.nato.int not later than the closing date in order to be considered. Only applications completed in accordance with the following instructions will be taken into consideration. The others will be rejected automatically. It is imperative that the subject line of your starts with the vacancy number, and further includes the post title and the grade of the post for which you are an applicant. Your application will not be taken into consideration if this information is omitted from the subject line of your . A) The application form and its supporting documentation (i.e. continuation sheets and copies of certificates) could be sent in a single containing a maximum of two electronic files (file 1: application form, file 2: supporting documentation). For technical reasons, the supporting documentation should not be attached to an internet link (i.e. personnel website, etc...). B) File 2 should be a single document of a maximum of 4 pages containing a copy of the qualification/certificate covering the highest level of education required by the job description. If this certificate is not in one of the two official NATO languages, you should include a translation into French or English. C) Candidates must answer each question completely in English (preferably) or in French. D) Expressions such as: please see attached CV, please see annex, please see enclosed document etc are not acceptable; this is a cause of immediate rejection of the application. Particular attention should be given to boxes 8a (Secondary education), 8b (Higher education), 8c (University education), 8d (Other education/training) and 15 (Employment record, which should contain a summary of work and for which, if necessary, continuation sheets can be added). E) If necessary you will be requested to supply documentary evidence in support of the statements you make in your application. Do not, however, send any additional documentation (such as certificates of other education/training, evaluation sheets, job descriptions, letters of appreciation/recommendation etc ) until you have been asked to do so by the SHAPE recruitment office and, in any event do not submit the original texts of references or testimonials unless they have been obtained for the sole use of the shape recruitment office. 5

6 F) If you are or have been a NATO International Civilian, please indicate last grade and step held, and specify in which NATO body you are/were employed. G) If you are or have been employed as a civilian in one of the coordinated organisations, please indicate last grade and step held, and specify in which organisation you are/were employed. Remarks: A) Only nationals from the 28 member states can apply for vacancies at SHAPE. the member states are: Albania, Belgium, Bulgaria, Canada, Croatia, Czech Republic, Denmark, Estonia, France, Germany, Greece, Hungary, Iceland, Italy, Latvia, Lithuania, Luxembourg, The Netherlands, Norway, Poland, Portugal, Romania, Slovenia, Slovakia, Spain, Turkey, United Kingdom and United States of America. B) All applications are acknowledged by return- . Should you not receive an acknowledgement within 3 working days of submitting your application, please resubmit the application to rsc.recruitment@shape.nato.int. C) Note for the personnel officers: if you have qualified redundant staff of same grade, please let us know by message not later than 01 July D) Due to the large amount of applications received for all vacancies, telephone, or telefax enquiries cannot be dealt with. 6