#NC25ICT175718 - MISP Engineer - Closed
Deadline: February 9, 2025
Requester: NATO
Location: Mons, Belgium.
Job type: Contractor
Start date: March 24, 2025
Security clearance: NATO SECRET
SCOPE OF WORK / DUTIES / ROLES
The contracted individual must be able to perform effectively and efficiently with minimal supervision.
Within the Inform Branch and reporting to the branch head or a delegated authority, the duties of the individual mainly focus on:
System administration:
- Proactively manage and maintain the multiple servers running the MISP software ensuring the necessary confidentiality, integrity and availability of the tool and information;
- Stand up, configure and manage dedicated MISP instances in support to multiple NATO exercises;
- Regularly update the MISP software to the latest version and support the test and validation effort for change management process;
- Configure and extend the system monitoring of those MISP installations;
- Maintain the ansible playbooks related to the MISP setup and configuration;
- Maintain and improve documentation related to the MISP installations within NATO.
Content Management:
- Developing (python) and maintain scripts to further automate and integrate MISP with other subsystems within NATO such as the SIEM, IDS, …;
- Support the quality management effort by creating and maintaining content quality checking rules.
User and Community Management:
- Provide support to the user-community of the NATO managed MISP instances;
- Provide feedback to the user-community on regular basis, and on daily-basis during exercises execution;
- During exercises, lead a team of multiple MISP Operators to support information flow, quality control and user management;
- Support the streamlining and automation of user management process with a combination of IT Service Management tools (ITSM) and Identity and Access Management (IDAM) tools like Cerebrate and/or Keycloak.
MISP Training support:
- Plan for, prepares and delivers a series of online MISP training Sessions to an exercise audience;
- Support the preparation of individual training packages for specific training audience to validate the training objectives have been met.
REQUIRED SKILLS, KNOWLEDGE AND EXPERIENCE
The required skillset for the contracted individual is extensive knowledge and experience (more than 5 years) in the following areas:
-
Very good technical understanding of the cyber threats to web-based products;
-
Demonstrated experience as sysadmin with LAMP servers - Linux, Apache, MySQL/MariaDB, PHP;
-
Experience with RedHat is an asset;
-
Excellent python scripting;
-
Experience in MVC software development and code review of web applications mostly in PHP language and with SQL;
-
Experience with CakePHP is an asset;
-
Prior experience as sysadmin of a MISP Threat Sharing platform is a very strong asset;
-
Prior experience in developing code (python, PHP) for MISP is an even stronger asset;
-
Prior experience in multinational cyber exercises like Locked Shields, Crossed Swords, Cyber Coalition, etc is an important asset;
-
Good understanding of cyber security principles, best practices, concepts and technology;
-
Ability to work independently and in teams to achieve the desired goals, including the ability to monitor and support a team;
-
Excellent organizing and communication skills;
-
Good communications and writing skills in English.
This position is now closed.
We regularly add new positions. We suggest exploring other available opportunities and staying updated by following our LinkedIn page.
If you don’t find any suitable opportunities, you can send us your CV, as an open application. However, we will not submit you to any vacancies without your written consent.
