Requirement: DCO Tracking Support
Location: Mons, BELGIUM
Full Time On-Site: Yes
Time On-Site: 100%
Not to Exceed Rate: 71 EUR
Total Scope of the request (hours): 395
Required Start Date: 2 November 2026
End Contract Date: 31 December 2026
Required Security Clearance: NATO SECRET
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:
- Current National or NATO SECRET clearance
- Nationality of one of the NATO member countries
- Current work visa for the specific location if applying for an in-country position
Duties & Role:
Under the direction of the Section Head, the contractor shall:
Perform security assessment and technical analysis, including but not limited to:
- Analyse the results of the vulnerability assessments on a weekly basis;
- Prepare, for every assessment report, a remediation plan and provide it to the appropriate technical point of contact;
- Interpret complex technical findings and provide remediation support to system administrators;
- Assess the technical impact of the vulnerabilities in order to prioritise remediation;
- Provide technical guidance, on a weekly basis, on the hardening measures required at operating system, database and network level.
- Design, build and maintain a relational database or structured data repository aggregating raw vulnerability scan data from the various sources;
- Automate the ingestion of scan results into the central database (data pipeline);
- Develop and maintain dynamic dashboards, using data visualisation and analytics platform such as Power BI or Grafana;
- Create visualisations for vulnerability metrics supporting operational and management reporting;
- Maintain and update the database and the dashboards on a weekly basis.
- Act as the technical point of contact for remediation towards site administrators and system owners;
- Monitor and maintain the tracking of remediation activities;
- Produce weekly and monthly reports for the various stakeholders;
- Chair technical coordination meetings with site administrators in order to resolve remediation roadblocks.
Requirements
Skills, Knowledge & Experience:
- The candidate must have a currently active NATO SECRET security clearance
- A minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience;
- Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work.
- At least 5 years of practical experience in vulnerability management, with proven experience within the last 6 months;
- At least 3 years of experience in testing and validating that contracted deliveries meet the security requirements and fulfil the intended use cases;
- General knowledge of cyber security principles, best practices, concepts and technology;
- Knowledge of cyber security architectures, including boundary protection, encryption, identity and access management, monitoring and detection, incident response, vulnerability assessments and risk management;
- Practical experience with vulnerability scanners and their output formats, such as Tenable Nessus, Qualys or OpenVAS;
- Demonstrated experience in building and operating data repositories and reporting pipelines for large volumes of security scan data.
- Database skills: proficiency in SQL (e.g. PostgreSQL, MS SQL) for data modelling, querying and storing large datasets of scan results;
- BI tools: advanced proficiency in Microsoft Power BI (data modelling, DAX) OR Grafana (connecting to SQL data sources, visualising time-series data);
- Scripting proficiency in Python (Pandas/NumPy) or PowerShell for parsing scan logs and automating data entry;
- Ability to take ownership of tasks and strong motivation to accomplish them to the end, working both independently and within a team;
- Very good communication, analytical and writing skills;
- Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency".
- Relevant certifications in cyber security, such as Certified Information Security Manager (CISM), Certified Information Systems Security Professional (CISSP) or GIAC Security certifications;
- Relevant certifications in data analytics or business intelligence, such as Microsoft Power BI Data Analyst Associate (PL-300) or Grafana Certified Professional, are an advantage.
