Senior Technician (Cyber Security – Endpoint Security)

The Senior Technician (Cyber Security – Endpoint Security) will provide NATO-wide support on endpoint protection solutions, manage software lifecycle activities, monitor IT security threats, and provide technical support to platform and infrastructure services. The role is based in Mons, Belgium, within the NATO Cyber Security Centre (NCSC) under the NATO Communications and Information Agency (NCIA).

Responsibilities

• Provide NATO-wide support on endpoint protection solutions such as anti-malware, removable device control, Data Loss Prevention, application whitelisting, disk wiping and Hard-Drive encryption solutions.
• Follow the software life cycle management (release, testing, distribution and maintenance) of various enterprise endpoint protection tools.
• Develop and test settings, and produce installation and configuration guidelines.
• Monitor the IT security threat landscape (mainly malware trends) and emerging security protection products.
• Review, test and install appropriate firmware, security patches and upgrades for Microsoft-based services and Windows-based operating systems at various locations and enclaves.
• Provide remediation plans for testing and implementation of third-party firmware and security patches on infrastructure servers and client workstations.
• Provide general technical support to platform and infrastructure services to resolve end user issues.

Requirements

• Higher vocational training in a relevant discipline with 2 years post-related experience or a secondary educational qualification with 4 years post-related experience.
• At least 2 years practical experience of implementing and maintaining security infrastructure.
• At least 2 years of experience in managing and supporting COTS endpoint protection solutions from security vendors such as Trellix/McAfee, Symantec, Trend Micro, Sophos, etc.
• At least 2 years of experience in malware protection technologies, malicious code techniques and associated countermeasures.
• At least 2 years of experience in managing and supporting other endpoint security solutions such as application whitelisting, host intrusion prevention, secure erasure, data loss prevention, drive encryption, disk wiping etc.
• At least 2 years of experience in software selection, evaluation and benchmarking.
• Experience in vendor relationship management including support account management and licence management.
• Experience in the implementation and integration of Cyber Security protective measures.
• Excellent communications skills and reporting experience with capacity to communicate to different types of audience (senior executive, middle management, technical and non-technical).
• Direct system administration experience with Linux, Windows Server and Windows 11 operating system environments.
• Good experience with Microsoft Active Directory, account lifecycle management, creating/supporting of group policy objects and organizational units.
• Fundamental knowledge of administering of MS SQL servers.
• Strong understanding of security issues surrounding server OS and applications.
• Fundamental understanding of storage area networks (SAN) concepts, protocols and technologies related to FC, iSCSI, WWN, soft/hard zoning, RAID protection levels, LUN masking, IOPS, read/write latency, deduplication, data clone/snapshot/replication.
• Fundamental understanding of backup and restore related concepts and technologies (i.e. full/differential/incremental backups, VM-based backups, application-aware backups, single item recovery, virtual/physical tape drives).
• Fundamental understanding of multi-factor authentication (MFA) concepts and technologies.
• Fundamental understanding of infrastructure concepts related to Hosting, Networks, IP Address Management, firewalls, certificates, Load balancing and Proxy.
• Good understanding on internet protocols including HTTP, SSL, TCP, IP.
• Fluency in English, both written and spoken.

Skills

• Endpoint Protection Management
• Malware Protection Technologies
• Application Whitelisting
• Host Intrusion Prevention
• Data Loss Prevention
• Drive Encryption
• Disk Wiping
• Software Selection and Evaluation
• Vendor Relations Management
• Cyber Security Implementation
• Linux OS Administration
• Windows Server Management
• Windows 11 Administration
• Microsoft Active Directory Services
• Group Policy Management
• MS SQL Server Administration
• Server OS Security
• Storage Area Networks
• Backup and Restore Technologies
• Multifactor Authentication
• Network Infrastructure Concepts
• Internet Protocols
• Security Reporting

Languages

English