#NC25SEC002 - Principal Technician (CIS Security) - Closed
Deadline: January 7, 2025
Requester: NATO
Location: The Hague, the Netherlands
Job type: Contractor
Start date: February 9, 2025
Security clearance: NATO Secret
SCOPE OF WORK / DUTIES / ROLES
- Work closely with the Service Delivery Manager to support service delivery and operations.
- Serve as a key point of contact for customers reporting issues related to web security, performance, and availability.
- Respond promptly to customer queries, investigate reported issues, and provide clear communication regarding status and resolution timelines.
- Provide ongoing monitoring and oversight of the security and performance of websites and applications.
- Ensure continuous improvement and adaptation of security measures to address evolving threats.
- Ensure the timely renewal of certificates and manage certificate chains to prevent vulnerabilities caused by expired or misconfigured certificates.
- Deploy and manage Web Application and API Protection (WAAP) solutions to prevent threats such as SQL injection, cross-site scripting (XSS), and other application-layer attacks.
- Configure and monitor Distributed Denial of Service (DDoS) protection tools to mitigate large-scale attack efforts.
- Manage and optimize the use of Content Delivery Networks (CDNs) to ensure fast and reliable content delivery to end users.
- Set up and maintain load-balancing configurations to ensure website availability and minimize downtime, even under heavy traffic.
- Oversee the implementation of website monitoring tools to track uptime, page load times, and other key performance indicators (KPIs).
- Perform other duties as required.
REQUIRED SKILLS, KNOWLEDGE AND EXPERIENCE
- Knowledge of NATO Security Directives.
- In-depth knowledge of web application security concepts, including common vulnerabilities (e.g., SQL injection, Cross-Site Scripting) and their mitigations.
- Knowledge of cloud security models and tools (AWS, Azure, Google Cloud) and the ability to integrate Cloudflare or similar solutions to protect cloud-based applications.
- Proven experience with security technologies such as WAFs, DDoS protection tools, threat intelligence platforms, and API security.
- Proven experience with DNS management and troubleshooting.
- Understanding of web performance optimization, CDN configurations, and strategies for ensuring the efficient delivery of content globally.
- Excellent communication abilities, both written and verbal, with the ability to clearly and successfully articulate complex issues to a variety of audiences and teams.
- Proven experience working with governance bodies to ensure compliance with security regulations and standards.
- Experience with managing and deploying SSL/TLS certificates and an understanding of PKI management.
- Experience with website monitoring and alerting.
- Writes convincingly, clearly, succinctly, and correctly.
- Avoids unnecessary jargon or complicated language.
- Writes in a well-structured and logical way.
- Structures information to meet the needs and understanding of the intended audience.
- Shows respect for the views and contributions of other team members.
- Shows empathy, listens, supports, and cares for others.
- Consults others and shares information and expertise with them.
- Builds team spirit and reconciles conflict.
- Adapts to the team and fits in well.
- Applies specialist and detailed technical expertise.
- Uses technology to achieve work objectives.
- Develops job knowledge and expertise (theoretical and practical) through continual professional development.
- Demonstrates an understanding of different organizational departments and functions.
This position is now closed.
We regularly add new positions. We suggest exploring other available opportunities and staying updated by following our LinkedIn page.
If you don’t find any suitable opportunities, you can send us your CV, as an open application. However, we will not submit you to any vacancies without your written consent.