Cyber Security Tools Engineer

As Tool Engineer, the incumbent will be responsible for supporting Cyber Defence operations, maintaining and updating Vulnerability Assessment (VA), Forensics and Malware Analysis (MA) systems. He will be also responsible for co‐ordination with various projects on implementation of additional deployments (new sites following existing design as well service modification /improvements including new design). They will report to the Head, Security Tools Management Section and collaborating with the personnel from Cyber Hygiene and CS Operations Branches. They will also work with other stakeholders to ensure smooth O&M and project related activities.

The tasks include ‐ but are not limited to – define, install and maintain cyber security related tools (VA, Forensic and MA) ensuring related services are provided to multiple stakeholders. The Tool Engineer will be in charge of aforementioned systems, ensuring they meet security requirements and proactively identifying areas of improvement.

Main responsibilities:

• Install, deploy, update, monitor, maintain, configure, troubleshoot and keep inoperational conditions the Cyber tools (Vulnerability Assessment (VA), Forensics andMalware Analysis (MA) systems);
• Act as the Subject Matter Expert of Cyber tools;
• Troubleshoot identified issues within the Cyber tools;
• Liaise with other stakeholders and co‐ordinate resolution of those issues;
• Identify any upgrade requirements and implement new versions following relevanttesting and internal change management process;
• Proactively propose system and service improvements to provide effective andefficient service operations;
• Implement approved changes;
• Collaborate with other stakeholders supporting project related activities (newimplementations, system upgrades/changes, etc.);
• Ensure the level of security (Confidentiality, Integrity, and Availability) of the Cybertools meets or exceeds the minimum‐security requirements defined by NATOsecurity authorities;
• Produce metrics to be integrated into wider NCSC or NCI Agency products that arebeing delivered up to NATO executive management level;
• Maintain awareness of new technologies and developments, industry standards andbest practices within the wider IA community and provide support for the selectionof new cyber tools;
• Produce technical reports and support the production of executive level reports;
• Review security documentation and provide technical advice;
• When required work autonomously and proactively.

Requirements

Mandatory

• NATO Secret Clearance
• Extensive practical experience in management of Cyber Security related tools;
• Very good practical hands‐on experience in systems and tools administration and troubleshooting (Windows/Linux);
• Good practical hands‐on experience in network infrastructure administration and troubleshooting;
• Good practical hands‐on experience in virtual infrastructure administration and troubleshooting;
• Demonstrable experience of analysing and interpreting system, security and application logs in order to diagnose faults and spot abnormal behaviours;
• Understanding of vulnerability assessment processes and concepts;
• Understanding of forensic processes and concepts;
• Understanding of malware analysis processes, tools and techniques;
• Practical experience in system design, documentation and implementation;
• In depth knowledge of the principles of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications. Working knowledge of scripting languages and automation technologies (Python, shell, PowerShell, Ansible);
• Comprehensive knowledge of the principles of computer and communication security, networking, and the vulnerabilities of modern operating systems and applications;
• Good communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams;
• Ability to investigate and analyse complex scenarios and solve problems in innovative ways;
• Demonstrable ability to work autonomously and proactively.

Desirable

• Demonstrable expert knowledge of Tenable Security Center / Tenable Nessusproducts;
• Extensive practical experience with forensics products (AccessData, Fidelis andEncase);
• Extensive practical experience with malware analysis products (Cuckoo, OpswatMetascan);
• Experience with system instrumentation solutions such as Ansible, Chef, …;
• Industry leading certification in the area of Cybersecurity such as CISSP, CISM,MCSE/S, CISA, GSNA, SANS GIAC;
• Tenable Certified Security Engineer;
• Prior experience of working in an international environment comprising both militaryand civilian elements.