• The service contractor will be required to have a Bachelor of Science (BSc) degree at a nationally recognised/certified university in a technical subject with substantial Information Technology (IT) content and 3 years post-related experience. As an exception, the lack of a university degree may be compensated by the demonstration of a candidate’s particular abilities or experience that are of interest to the NCI Agency; namely, at least 10 years of extensive and progressive experience in the duties related to the functions of this post.

Extensive knowledge and experience (at least 3 years) in the following areas:

• Web application penetration testing;
• IT infrastructure penetration testing;
• Network security architecture design;
• Assessing security vulnerabilities within OS, software, protocols & networks;
• Researching and evaluating security products & technologies;
• Knowledge in system and network administration of UNIX and Windows systems;
• Use of penetration testing tools, techniques, and recognized testing methodologies;
• Scripting skills in at least one of the following: Python, Go, PowerShell, shell (bash, ksh, csh);
• Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies;
• Ability to evaluate risks and formulate mitigation plans;
• Proven ability to brief at executive level on security findings, reports and testing outcome;
• Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences.

Language Proficiency:

• A thorough knowledge of one of the two NATO languages, both written and spoken, is essential and some knowledge of the other is desirable;
• NOTE: Most of the work of the NCI Agency is conducted in the English language.

Desirable:

• Professional qualifications: OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application Tester, GXPN, GWAPT or equivalent;
• Familiarity with risk analysis methodologies;
• Prior experience of working in an international environment comprising both military and civilian elements;
• Knowledge of NATO organization, internal structure and resultant relationships;
• Prior experience of working in an international environment comprising both military and civilian elements;
• Knowledge of NATO organization, internal structure and resultant relationships.