Expert on Defensive Cyberspace Operations Management DSO

Essential Qualifications/Experience:

·       2+ years of direct experience in defensive cyberspace operations focusing on the planning and conducting operations in military focused environments encompassing activities such as advanced technical operations, incident response, threat hunting, adversary emulation, etc

·       3+ years proven project management experience working with different organizations within a federated environment in the coordination of planning, execution and technical remediation activities; The contractor must have excellent communication and negotiation skills

Desirable Qualifications/Experience:

·       Previous NATO experience in one or more of the fields of cybersecurity, cyber defence, cyberspace operations, cyber risk management or cyber incident management

·       Cyber security certifications such as CISM, CISSP or equivalent post-graduate degree in cybersecurity

DUTIES/ROLE:

·       Plan, coordinate and oversee advanced technical DCO, incorporating activities such threat hunting activities, adversary emulation and deception technologies:

ü  Draft clear and concise technical and non-technical reports

ü  Working with NATO SMEs, develop relevant red and blue pictures in support of developing DCO plans

ü  Develop DCO plans, supporting processes and procedures

ü  Develop effective and actionable remediation plans based on lessons identified captured through DCO execution

ü  Prepare and deliver presentations to technical and non-technical audiences, in order to facilitate consensus building and decision-making

ü  Coordinate the work of the DPCC, ensuring appropriate communication and cooperation amongst the relevant NATO Enterprise stakeholders

ü  Support the DPCC meetings, in working level and principals level format, facilitating discussions, leading CDT initiatives and providing advice during the DCO lifecycle

ü  Liaise with CyOC, NCIA and other stakeholders for the planning and coordination of any cyberspace activities in the context of DCOs

ü  Support the NATO Enterprise Incident Manager in the coordination and assessment of cybersecurity incident response activities in relation to ongoing DCOs

ü  Support the risk management and decision making processes, coordinating with the NATO Cyber Risk Management Group (CRMG) and the NATO Board of CISOA (BCISOA)