Job description:

Deadline Date: Wednesday 18 November 2026
Requirement: Expert on Defensive Cyberspace Operations Management DSO
Location: Mons, BELGIUM
Full Time On-Site: Yes
Not to Exceed Rate:78 EUR
Total Scope of the request (hours): 1672 hrs (Estimate)
Required Start Date: 4 January 2027
End Contract Date: 31 December 2027
Required Security Clearance: NATO SECRET
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:

Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted.

Introduction
The NATO Cyber and Digital Transformation (CDT) Division brings Information and Communications Technology (ICT) coherence across NATO Enterprise's civil and military bodies. CDT is empowered to realize the Allies' vision for the NATO Enterprise, is accountable to the Secretary General and is responsible for the development of Enterprise directives and advice on the acquisition and use of information technologies and services.
CDT also provides Enterprise oversight on cybersecurity issues, and, in close coordination with all relevant NATO civil and military bodies, works towards the continual improvement of the cyber hygiene and cybersecurity posture in the NATO Enterprise.
CDT is an integrated staff organization comprised of International Staff (IS) and International Military Staff (IMS) members.
CDT supports the planning, coordination and execution of Defensive Cyberspace Operations (DCO) in NATO networks, as one of the leading members of the DCO Planning and Coordination Cell (DPCC).
The incumbent will be responsible for ensuring appropriate coordination amongst the DPCC members (i.e. NATO Cyberspace Operations Centre (CyOC), Joint Intelligence and Security Division (JISD), NATO Communications and Information Agency (NCIA) and CDT). S/He will also be responsible for managing the complete lifecycle of DCOs led by the CDT, including the planning, conduct, assessment, and follow-up phases.
The incumbent must demonstrate in-depth knowledge of advanced technical operations in defence of communication and information systems, but also good knowledge in cyber incident management and cyber risk management best practices and processes.

Tasks
The contractor will effectively and efficiently provide, with minimal support, the following services:

• Plan, coordinate and oversee advanced technical DCO, incorporating activities such as threat hunting activities, adversary emulation and deception technologies;
• Draft clear and concise technical and non-technical reports;
• Working with NATO SMEs, develop relevant red and blue pictures in support of developing DCO plans;
• Develop DCO plans, supporting processes and procedures;
• Develop effective and actionable remediation plans based on lessons identified captured through DCO execution;
• Prepare and deliver presentations to technical and non-technical audiences, in order to facilitate consensus building and decision-making;
• Coordinate the work of the DPCC, ensuring appropriate communication and cooperation amongst the relevant NATO Enterprise stakeholders;
• Support the DPCC meetings, in working level and principals level format, facilitating discussions, leading CDT initiatives and providing advice during the DCO lifecycle;
• Liaise with CyOC, NCIA and other stakeholders for the planning and coordination of any cyberspace activities in the context of DCOs;
• Support the NATO Enterprise Incident Manager in the coordination and assessment of cybersecurity incident response activities in relation to ongoing DCOs;
• Support the risk management and decision making processes, coordinating with the NATO Cyber Risk Management Group (CRMG) and the NATO Board of CISOA

RequirementsProfile

• The contractor must have more than 2 years of direct experience in defensive cyberspace operations focusing on the planning and conducting operations in military focused environments encompassing activities such as advanced technical operations, incident response, threat hunting, adversary emulation, etc.
• The contractor must have a minimum of 3 years proven project management experience working with different organizations within a federated environment in the coordination of planning, execution and technical remediation activities;
• The contractor must have excellent communication and negotiation skills;
• The contractor must have excellent English writing skills, the ability to draft clear and concise reports, and the ability to brief on their work in English;
• The contractor must have good knowledge of the principles, policy and procedures governing cybersecurity, preferably in military and/or defence organizations;
• Previous NATO experience in one or more of the fields of cybersecurity, cyber defence, cyberspace operations, cyber risk management or cyber incident management is desirable;
• Cyber security certifications such as CISM, CISSP or equivalent post-graduate degree in cybersecurity are desirable;

Security and non-disclosure Areement

• The contractor must be in possession or capable of possessing a security clearance of NATO SECRET.

Qualifications:

Mandatory Requirements

Defensive Cyber Operations

More than 2 years of direct experience in defensive cyberspace operations.

Experience planning and conducting cyber defence operations in military-focused environments.

Practical exposure to activities such as:

Advanced technical operations

Cyber incident response

Threat hunting

Adversary emulation

Cyber defence and remediation activities

Project Management

Minimum 3 years of proven project management experience.

Experience coordinating planning, execution and technical remediation across different organisations in a federated environment.

Cybersecurity Knowledge

Good understanding of cybersecurity principles, policies and procedures.

Understanding of cyber defence and operational risk management, preferably within military or defence organisations.

Communication

Excellent communication and negotiation skills.

Strong English writing skills.

Ability to prepare clear and concise technical and non-technical reports.

Confidence presenting and briefing work to technical and senior stakeholders.

Why is This a Great Opportunity:

Coordinate high-level cyber defence operations in an international military environment.

Work with major NATO cybersecurity stakeholders and operational teams.

Influence defensive cyber planning, incident response and remediation activities.

Gain exposure to advanced threat hunting and adversary emulation operations.

Take ownership of coordination across a complex multinational environment.

Potential opportunity for contract extension into 2028.

Salary Type : Hourly

Salary Min : € 78

Salary Max : € 78

Currency Type : EUR