Jobiglo

No results.

Cyber Defense Engineer – NATO (Security Clearance Required)

Work Life Group NL · La Spezia

New
Mid 🇬🇧 English
Trellix Endpoint Security Splunk SIEM Tenable Nessus Sonatype Nexus MITRE ATT&CK NIST 800-61 ISO 27035 TCP/IP DNS HTTP/S SMTP Python PowerShell Bash

Job description

About the role

The Cyber Defense Engineer will protect, monitor, and defend NATO's technology infrastructure and data assets. You will operate and optimise security tools to detect, analyse, and respond to cyber threats while collaborating with IT, DevOps, and external partners.

Key responsibilities

  • Monitor and analyse security events using Splunk SIEM, correlating data from endpoints, network, and vulnerability systems.
  • Operate Trellix Endpoint Security and EDR to identify, contain, and remediate endpoint threats.
  • Run and review Tenable Nessus vulnerability scans and coordinate remediation with IT teams.
  • Manage secure software components through Sonatype Nexus, identifying vulnerable dependencies and supporting DevSecOps pipelines.
  • Participate in incident response activities: detection, triage, containment, eradication, and recovery.
  • Develop and maintain Splunk detection rules, dashboards, and automated alerts aligned with the MITRE ATT&CK framework.
  • Document security events, maintain SOC playbooks, and support ISO 27001, NIST CSF, and GDPR compliance audits.
  • Provide situational‑awareness reports and risk insights to management and stakeholders.
  • Propose new use cases and optimise detection coverage to continuously improve the SOC.

Required profile

  • Minimum three years of experience in Cybersecurity Operations, SOC analysis, or Incident Response.
  • Strong understanding of threat detection, incident handling, and vulnerability management processes.
  • Ability to manage multiple incidents in a fast‑paced operational environment.
  • Excellent analytical, troubleshooting, and reporting skills.

Required skills

  • Trellix Endpoint Security / ePO (EDR platform)
  • Splunk SIEM
  • Tenable Nessus (vulnerability scanner)
  • Sonatype Nexus (software component analysis)
  • Knowledge of MITRE ATT&CK, NIST 800‑61, ISO 27035 frameworks
  • Familiarity with TCP/IP, DNS, HTTP/S, SMTP protocols and log analysis
  • Scripting languages: Python, PowerShell, Bash

Questions fréquentes

Le salaire n'est pas communiqué publiquement par le recruteur. Vous pouvez postuler et négocier directement avec Work Life Group NL.
Cliquez sur "Postuler maintenant" en haut de la page. Vous pouvez importer votre CV en 1 clic — Jobiglo extrait automatiquement vos informations et postule pour vous.

Why are you reporting this job?

Thank you for your report. We will review this job.

Apply in 30 seconds

Enter your email to apply. An account will be created automatically.

By continuing, you accept our terms of use.

Already have an account? Login

Published 1 settimana fa

Expires tra 1 mese

9 views · 0 applications

Boost your chances

Upload your CV — we will match you with relevant openings.

Analyzing your CV...

Work Life Group NL

La Spezia