Cyber Security Incident Responder

NATO Communications and Information Agency (NCIA) is looking for a Cyber Security Incident Response specialist to strengthen its Network Security branch. In this role, you provide 24/7 incident response coverage and support NATO's broader cyber security posture across the Alliance.

Duties

• Provide 24/7 Cyber Security Incident Response activities (Triage, Contain, Eradicate, Recover) during normal working hours and occasional on-call duties, including weekends and holidays.
• Deliver technical coordination, support and assistance for Cyber Security Incident Response to NATO CIS Operating Authorities, including NATO Nations, Partner Nations, non-Governmental Organisations and Industry Partners.
• Lead, be a member of, or support Cyber Security Response Teams designated to extend NCSC Incident Response coverage to one or multiple physical locations, including within NATO Alliance Operations and Missions.
• Build, manage the lifecycle of, and maintain the taxonomy related to the Branch's information.
• Manage the content of different information portals within the agreed taxonomy.
• Design, create and distribute a variety of reports, briefings and dashboards to different communities, including business owners, the operational community, IT service management and cyber security.
• Maintain a network of cyber security peers across and beyond the NATO Enterprise to facilitate communications and coordination of urgent actions when the need arises.
• Research, identify, document and implement improvements to Incident Response activities, in order to enhance and optimise current best practice to meet new and developing threats.
• Produce Standard Operating Procedures and Instructions covering all aspects of Incident Response.
• Participate in, and act as an Incident Response subject matter expert in, various meetings: within the CSIRT, across the sections in the Defend branch, across the NATO Enterprise, including within the NICC, CMAWG, CRMG and other Enterprise-level meetings, as well as within the context of a Cyber Incident Task Force.