C004123, CIS Security Engineer 

Duties & Responsibilities:

1. Information Security Oversight:

   • Ensure security of all NISC-managed CIS and networks for internal and customer-funded operations.
   • Maintain compliance with NATO INFOSEC policies and directives.

2. Security Tools & Systems Management:

   • Design, deploy, configure, maintain, and operate Trellix ePolicy Orchestrator (EPO) and security tools (ENS, DLP, MAC, RSD, TIE, HX).
   • Ensure approved security configurations are implemented and maintained throughout Trellix products’ lifecycle.

3. Active Directory (AD) Security Management:

   • Oversee and manage AD security solutions for NISC-managed CIS.
   • Ensure continuous monitoring and coordination of vulnerability remediation.

4. Security Advisory & Compliance:

   • Provide expert security advice, in coordination with NCSC and NATO Security Accreditation Board.
   • Ensure appropriate security measures are implemented under NATO security governance.
   • Conduct internal vulnerability assessments and report findings.

5. Enterprise Security & Management Support:

   • Provide guidance to senior management on enterprise architecture, procurement, NATO security accreditation.
   • Contribute to training and awareness programs.

6. Collaboration & Remediation Activities:

   • Work with NCI Agency Service Delivery Managers on security remediation.
   • Ensure adequate systems and data protection per NATO security policies.

7. Other Duties:

   • Perform additional tasks as required.

Requirements & Qualifications:

Technical Knowledge & Experience:

• Expert knowledge of Trellix ePO and its managed products (ENS, DLP, MAC, RSD, TIE, HX).
• Strong understanding of CIS security, networking, and OS vulnerabilities.
• Hands-on experience with Active Directory security and CIS Security protective measures.
• Familiarity with Cyber Hygiene and the Top 20 Critical Security Controls for cyber defense.
• Ability to investigate, analyze, and solve complex security scenarios using innovative approaches.

Skills:

• Writing & Reporting: Ability to write clear, concise, and structured reports without unnecessary jargon.
• Teamwork & Collaboration: Strong interpersonal skills, ability to work with cross-functional teams, share expertise, and resolve conflicts.
• Technical Expertise: Applies specialized knowledge, stays updated with the latest technologies, and understands organizational functions.