• Coordinate project management activities, resources, equipment, and information • Segment projects into achievable actions and set timeframes for completion • Liaise with clients to identify and define requirements, scope, and objectives • Assign tasks to internal teams and assist with schedule management • Make sure that clients needs are met as projects evolve • Analyze risks and opportunities • Monitor project progress and manage issues that arise • Communicate project status to all stakeholders • Work with the team to eliminate blockers • Use tools to monitor working hours, plans and expenditures • Create and maintain comprehensive project documentation, plans and reports • Ensure standards and requirements are met through monitoring quality assurance and control activities • Create schedules and collect documents to orient and guide projects and outcomes • Communicate with stakeholders about scheduling, staffing, and technical requirements • Help with other projects/duties as needed

• Technical owner for the information security operations platform, responsible for the architecture, strategy, and sustaining controls for detection, incident response, vulnerability management, identity management, and perimeter governance. • Primary technical reference for the area, contributing to process maturity and the technical development of the team. • Architect, deploy, and direct the maintenance of an open-source-based SIEM platform, including data collection, normalization, event correlation, processing pipelines, and retention policies. • Develop and maintain detection use cases aligned with the MITRE ATT&CK framework, with continuous tuning to reduce false positives and increase detection effectiveness. • Strategically lead the corporate Vulnerability Management program, including risk-based prioritization, coordination of remediation with technology teams, and monitoring executive-level indicators. • Define and govern Identity and Access Management (IAM) processes: identity lifecycle, segregation of duties, RBAC, MFA, and periodic access reviews. • Govern policies and rules for Next-Generation Firewalls (NGFW): network segmentation, periodic rule reviews, and hardening. • Provide technical leadership for response to critical security incidents, supporting containment, forensic analysis, and coordination of remediation activities. • Implement and monitor hardening of environments based on recognized industry benchmarks (CIS Benchmarks). • Develop automations and integrations using tools and scripting languages to optimize team operations. • Prepare and maintain high-complexity technical documentation, standard operating procedures, security policies, and reference architectures. • Act as a mentor to team analysts, promoting knowledge transfer, technical culture, and operational continuity.

• Protect the organization's digital assets • Deploy and manage security technologies like EDR and SIEM • Lead vulnerability and threat programs • Conduct threat hunting • Administer the SIEM platform • Respond to security incidents • Manage email security and DLP solutions

Role Description Assistance and Advisory Service (AAS) is seeking personnel to provide governance and coordination support for enterprise cybersecurity governance activities, specifically supporting the Cyber Lessons Learned (LL) and NATO Enterprise Cybersecurity Scorecard (Scorecard) processes. - Support the implementation and operationalization of the Cyber Lessons Learned process across relevant cybersecurity stakeholders. - Engage stakeholders involved in the relevant cybersecurity processes. - Coordinate the capture and structuring of lessons learned information. - Support documentation of changes made to procedures or documentation resulting from lessons learned. - Support the organization and documentation of Lessons Learned coordination meetings and workshops. - Support the maintenance of templates, repositories, or portals used to capture lessons learned information. - Support coordination of the Assessment Team (including contractors) performing Scorecard activities. - Review contractor outputs and provide quality assurance observations to CDT. - Maintain oversight documentation such as tracking dashboards, issue logs, and status summaries. Qualifications - Expertise in Cyber Security: Extensive experience in cyber security with a focus on analytical assessment, scorecard development, and performance metrics. - Methodology Development Skills: Proficiency in developing, refining, and updating methodologies for assessing cybersecurity maturity and performance. - Experience with Lessons Learned or Knowledge Management Processes: Experience supporting Lessons Learned, knowledge management, or continuous improvement processes. - Communication Skills: Strong written and verbal communication skills for engaging with various stakeholders. - Autonomous Working Capability: Capable of performing effectively and efficiently with minimal supervision. Requirements - Valid National or NATO Secret personal security clearance. - Remote working location (in a NATO country). - Some travel to other NATO sites may be required. Benefits - Opportunity to work with NATO and contribute to critical cybersecurity initiatives. - Flexible working arrangements.