- Company Name
- Work Life Group NL
- Job Title
- Vulnerability Assessment Engineer for NATO with security clearance
- Job Description
-
Job title: Vulnerability Assessment Engineer – NATO (Security Clearance)
Role Summary: Senior engineer responsible for planning and executing comprehensive on‑site CIS Security Audits (Type‑3) across NATO and partner facilities. Independently assess networks, systems, and applications, analyze security data, and produce authoritative audit reports and briefings to drive remediation.
Expectations:
- Operate autonomously with minimal supervision while meeting audit timelines.
- Deliver clear, actionable findings to senior stakeholders.
- Contribute to the development of in‑house data collection and analysis tools.
Key Responsibilities:
- Plan, schedule, and conduct on‑site CIS Security Audits (Type‑3).
- Execute vulnerability scans on large, complex networks without impacting availability or performance.
- Analyze assessment data and identify security weaknesses.
- Author detailed Security Audit reports with findings, recommendations, and remediation guidance.
- Provide stakeholder briefings and support remediation efforts.
- Develop and maintain in‑house tools for data collection, analysis, and automation.
- Perform additional duties as required.
Required Skills:
- Deep understanding of computer/communications security, enterprise networking, and OS/application vulnerabilities.
- Ability to assess controls per Zero Trust Architecture, Data Centric Security, CIS Benchmarks, and NIST.
- Extensive hands‑on experience with Tenable Nessus (advanced configuration, audit file creation, compliance enforcement).
- Proficiency in Active Directory security, Microsoft Azure AD/Entra ID/Office 365, and AWS Cloud Security.
- Familiarity with DevSecOps, CI/CD, and cloud‑native deployment security.
- Experience in system hardening, anti‑malware, endpoint protection, and network hardening.
- Knowledge of Ansible, SDN, SOA, and integrating modern architectures with security frameworks.
- Advanced scripting (PowerShell, Python, Bash) for data processing and workflow automation.
- Applied AI/LLM security assessment capability.
- Strong communication: briefing senior stakeholders, presenting findings, producing high‑quality reports.
- Independent and collaborative work habits within multidisciplinary teams.
Required Education & Certifications:
- Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent experience).
- Certifications such as CISSP, CEH, GRC, CCNP Security, or relevant cloud security certifications (Azure Security Engineer, AWS Security Specialty) preferred.