Location: Ramstein, DE
Duties & Role:
• Applies and maintains specific security controls as required by organisational policy and local risk assessments.
• Communicates security risks and issues to business managers and others.
• Performs basic risk assessments for small information systems.
• Contributes to the identification of risks that arise from potential technical solution architectures.
• Suggests alternate solutions or countermeasures to mitigate risks.
• Defines secure systems configurations in compliance with intended architectures.
• Supports investigation of suspected attacks and security breaches.
• Leads a team of 3-4 Cyber Security and COMSEC personnel through day-to-day operations
• Responsible as the Cyber Security Section Head for the administration of all aspects of Cyber Security activities in coordination with the NATO Cyber Security Centre (NCSC), to include, but not limited to, boundary protection management, data loss prevention and enterprise antimalware.
• Schedule, coordinate and facilitate security audits and inspections, manage post inspection actions.
• Supervises monitoring, testing, evaluating computer security systems and the evaluation of Cyber Security aspects of CIS Accreditation.
• Plans and as necessary implements Cyber Security services in support of Agency SLs, DSO, Strat and other Agency organizational elements as applicable.
• Can support physical task requirements with the ability to lift up to 25 lbs.
• Deputise for higher grade staff as required.
• Performs other duties as required.
Skill, Knowledge & Experience:
• Security clearance (COSMIC TOP SECRET-ATOMAL, CTS-A)…
• At least 2 years’ experience with system security, security architecture, network security engineering, security governance, and risk management.
• Detailed knowledge and working experience of security and networking technologies including IPv4, Firewalls, VPNs, Proxy Servers, IDS and Forensic tools.
• Experience with wireless LAN, mobile endpoint security, incident handling, audits, risk assessments, vulnerability mitigation.
• Previous NATO CIS experience and knowledge of NATO structures and policies.
• Bachelor’s degree + 2 years experience OR 6 years equivalent experience.
• Strong soft skills: multitasking, teamwork, stress handling, communication.
• English level B2–C1 (STANAG 6001 Level 3).
• Technical stack: Palo Alto, PKI, McAfee, Windows Server, virtualization (VMware), endpoint security, Nessus.
• Knowledge of DR/BC, cloud fundamentals, international environments.
• Certifications: ITIL, NATO COMPUSEC, Security certs (CISSP, CISM etc.).