Location: Mons, BE
Duties & Role:
- The contracted individual will be asked to support the development of one or more technical deliverables.
- The contracted individual must be able to perform effectively and efficiently with minimal supervision.
- Frequent travel to NATO and national (NATO and non-NATO) facilities is required in support of assessments.
- The duties are normally performed within government or military installations, where security protocols and operational requirements prevail.
- The position is based on-site, with very limited opportunities for teleworking.
- The duties of the individual mainly focus on:
- Plan and execute technical On-site CIS Security Audits (Type-3) for networks, systems, and applications, and ensure the accuracy of the results;
- Analyse collected assessment data and identify security weaknesses;
- Write Security Audit reports with findings and appropriate recommendations;
- Provide briefings and further information to support remediation and mitigation;
- Contribute to development of in-house toolset for data collection and analysis;
- Performs other duties as may be required.
Skill, Knowledge & Experience:
- The required skillset for the contracted individual is extensive knowledge and experience (more than 3 years – except AI) in the following areas:
- Proven, in depth understanding of computer and communications security, enterprise networking, and the vulnerabilities inherent in modern operating systems and applications;
- Ability to assess a variety of security controls aligned with industry best practices, including Zero Trust Architecture and Data Centric Security principles;
- Expert knowledge in executing vulnerability assessment scans across large, complex networks without impacting system availability or performance;
- Demonstrable hands on experience with Tenable Nessus products, including advanced configuration and customization;
- Extensive proficiency in developing and deploying Nessus audit files to enforce compliance checks for operating systems, network devices, and applications;
- Thorough understanding of Active Directory security configuration and associated vulnerabilities;
- Advanced knowledge of Microsoft Azure AD / Entra ID / Office 365 and AWS Cloud Security, with practical experience in securing hybrid and cloud environments;
- Familiarity with DevSecOps practices, embedding security into CI/CD pipelines and cloud native deployments;
- Comprehensive experience in assessing and implementing system hardening measures, antimalware configurations, and endpoint protection strategies;
- Ability to benchmark systems against recognized security standards (e.g., CIS Benchmarks, NIST);
- Applied expertise in Artificial Intelligence, including the capability to assess Large Language Models (LLMs);
- Proficiency in implementing and securing Ansible deployments;
- Expertise with Software Defined Networking (SDN) and Service Oriented Architecture (SOA) implementations;
- Capability to integrate modern architectures with enterprise security frameworks;
- Enhanced skillset in data processing automation using scripting languages (e.g. PowerShell, Python, Bash);
- Ability to build repeatable workflows/checklists to improve efficiency and reduce human error;
- Excellent communication skills, including briefing senior stakeholders, delivering clear presentations, producing high quality reports, and mediating technical discussions;
- Strong interpersonal abilities with a proven track record of working independently and collaboratively within multidisciplinary teams;