C003905 Vulnerability Assessment Engineer

McBride, based in McLean, VA, USA, and with offices in Brussels and Bucharest (McBride International), is a Prime Contractor on the NCIA A&AS Framework. We are a management and IT consulting firm with significant professional services experience that includes IT transformation, project management, digital transformation, strategic planning, business process improvement, change management, human capital management, systems engineering, and operations. Due to our excellent relationship with NATO and the first-class, security cleared candidates that we source and supply from all 32 NATO nations, we are extremely privileged to ask you to review this role to assess your suitability of skills.

You will be working as a contractor for our client – NATO Communications & Information Agency (NCIA) NATO Communications & Information Agency (NCIA) NCIA was established on 1 July 2012 from a merger of several NATO entities. It has a 65-year legacy of supporting NATO operations, missions, and exercises and is on the front lines against cyber threats, protecting NATO's networks 24/7.

NCIA provides expertise and services that are critical to NATO's ability to fulfill its core tasks of consultation, collective defence, and crisis management.

Duties:

• The contracted individual will beasked to support the development of one or more technical deliverables and/orprovide exercise support in execution of projects undertaken within the 2025calendar year.
• The contracted individual must beable to perform effectively and efficiently with minimal supervision.
• Travel to NATO and national (NATOand non-NATO) facilities is required in support of assessments.
• The duties of the individualmainly focus on:
• Plan and execute technical On-site
  
  CIS Security Audits (Type-3) for networks, systems, and applications, andensure the accuracy of the results;
• Analyse collected assessment dataand identify security weaknesses;
• Write Security Audit reports withfindings and appropriate recommendations;
• Provide briefings and further information to support remediation and mitigation;
• Contribute to development ofin-house toolset for data collection and analysis;
• Performs other duties as may be required.

Requirements:

• The required skillset for thecontracted individual is extensive knowledge and experience (more than 3 years) in the following areas:
• In-depth understanding of computer and communications security, networking, and the vulnerabilities of modernoperating systems and applications;
• Expert level of knowledge in executing vulnerability assessment scans for large networks, without impacting the availability or the performance of the scanned systems;
• Demonstrable expert knowledge of,and work experience with
• Extensive level of knowledge in developing advanced Nessus configurations using audit files for implementingcompliancy checks for operating systems, network devices and applications;
• Thorough understanding of Active Directory security configuration and associated vulnerabilities;
• Comprehensive experience inassessing system hardening and antimalware configuration;
• Advanced knowledge of Microsoft Azure AD/Entra /Office 365 and/or AWS Cloud Security;
• Enhanced skillset in data processing automation using script languages (e.g. Power Shell, Python, Bash);
• Excellent communication skills with respect to briefing/presenting, report writing & mediation;
• Good interpersonal skills andability to work independently and aspart of a team;