Cyber Security Defender – Multiple Roles

About the role

Join the NATO Communications and Information Agency in Mons, Belgium, as a Cyber Security Defender. You will be part of the NATO Cyber Security Centre (NCSC) and the Rapid Response Team (RRT), providing critical defence capabilities across NATO’s digital infrastructure.

Key responsibilities

• Deploy on short notice to secure and austere locations, set up and operate cyber‑defence equipment.
• Conduct host‑based and network‑based analysis to detect indicators of compromise and adversary activity.
• Support incident triage, containment and remediation under team‑lead direction.
• Install, configure and maintain toolsets such as EDR, SIEM integrations, network sensors and forensic platforms.
• Perform log analysis and data correlation to aid threat detection, investigation and hunting.
• For senior defenders: lead RRT personnel, act as on‑site mission lead, oversee full‑spectrum incident response and drive post‑incident reviews.

Required profile

• Motivated and enthusiastic professionals able to operate in secure and austere environments.
• Strong analytical mindset for identifying and responding to cyber threats.
• Ability to work both independently and as part of a rapid response team.
• Senior candidates should demonstrate leadership experience in cyber‑operations.

Required skills

• Experience with Endpoint Detection and Response (EDR) solutions.
• Proficiency in Security Information and Event Management (SIEM) platforms.
• Knowledge of network sensors and forensic analysis tools.
• Log analysis, data correlation and threat‑hunting techniques.

What we offer

• Opportunity to work on NATO‑critical cyber security missions.
• Collaborative environment with leading technology and cyber experts.
• Professional development and training within an international defence organization.