Expert on Defensive Cyberspace Operations Management

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

---

Who we are supporting

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

---

Role ID –  CDT-0030

Role Background

The NATO Cyber and Digital Transformation (CDT) Division brings Information and Communications Technology coherence across NATO Enterprise's civil and military bodies. CDT is accountable to the Secretary General for developing Enterprise directives, providing cybersecurity oversight, and continually improving cyber hygiene. As an integrated staff organization, CDT supports the planning, coordination, and execution of Defensive Cyberspace Operations (DCO) as a leading member of the DCO Planning and Coordination Cell (DPCC). The incumbent will ensure appropriate coordination amongst DPCC members and manage the complete lifecycle of DCOs led by CDT, spanning planning, conduct, assessment, and follow-up phases. The role requires in-depth knowledge of advanced technical defence operations for communication and information systems, alongside strong expertise in cyber incident and risk management best practices.

Role Duties and Responsibilities

The contractor will effectively and efficiently provide, with minimal support, the following services:

• Plan, coordinate and oversee advanced technical DCO, incorporating activities such as threat hunting activities, adversary emulation and deception technologies.
  • Draft clear and concise technical and non-technical reports.
  • Working with NATO SMEs, develop relevant red and blue pictures in support of developing DCO plans.
  • Develop DCO plans, supporting processes and procedures.
  • Develop effective and actionable remediation plans based on lessons identified captured through DCO execution.
  • Prepare and deliver presentations to technical and non-technical audiences, to facilitate consensus building and decision-making.
  • Coordinate the work of the DPCC, ensuring appropriate communication and cooperation amongst the relevant NATO Enterprise stakeholders.
  • Support the DPCC meetings, in working level and principals level format, facilitating discussions, leading CDT initiatives and providing advice during the DCO lifecycle.
  • Liaise with CyOC, NCIA and other stakeholders for the planning and
    coordination of any cyberspace activities in the context of DCOs.
  • Support the NATO Enterprise Incident Manager in the coordination and
    assessment of cybersecurity incident response activities in relation to ongoing DCOs.
  • Support the risk management and decision-making processes,
    coordinating with the NATO Cyber Risk Management Group (CRMG) and the NATO Board of CISOA (BCISOA).

Essential Skills, Experience and Certifications

• The contractor must have more than 2 years of direct experience in defensive cyberspace operations focusing on the planning and conducting operations in military focused environments encompassing activities such as advanced technical operations, incident response, threat hunting, adversary emulation, etc.
• The contractor must have a minimum of 3 years proven project management experience working with different organizations within a federated environment in the coordination of planning, execution and technical remediation activities.
• The contractor must have excellent communication and negotiation skills.
• The contractor must have excellent English writing skills, the ability to draft clear and concise reports, and the ability to brief on their work in English.
• The contractor must have good knowledge of the principles, policy and procedures governing cybersecurity, preferably in military and/or defence organizations.

Desirable Skills, Experience and Certifications

• Previous NATO experience in one or more of the fields of cybersecurity, cyber defence, cyberspace operations, cyber risk management or cyber incident management is desirable.
• Cyber security certifications such as CISM, CISSP or equivalent post-graduate degree in cybersecurity is desirable.

Working Location

• NATO SHAPE (Mons, Belgium)

Working Policy

• On-site

Travel

• Frequent travels or short deployments to NATO Command Structure bodies, including NATO HQ offices in Brussels, may be required.

Security Clearance

• Valid National or NATO Secret personal security clearance