Location:
Brussels, Belgium

Security Clearance:
EU Secret

Skills, knowledge, experience required:

• A University degree in the field of information technology;
• Minimum 9 years’ professional experience in IT security;
• In-depth knowledge and professional experience (minimum 6 years where relevant) in the following domains in which the contractor will be required to provide their service:
• Experience being actively involved (document development and risk analysis) in classified CIS accreditation in one of the EU Member States, EU Institutions or other international organisations (NATO, OCCAR, etc.) handling classified information;
• In-depth knowledge of information security (INFOSEC) especially in the field of classified systems, cryptography, and security evaluation scheme (Common criteria, ITSEC, etc.)
• Having performed several risk analysis using a formal internationally recognized risk assessment methodology such as EBIOS, MAGERIT, MEHARI;
• Experience in the use and deployment of certified/approved security components such as firewalls, virtual private network, IP encryptors, etc.;
• Experience with Unix family operating systems (x86 Linux, mainly RHEL);
• Experience with Public Key Infrastructure - X509 certificates;
• Extensive drafting skills required in the development of technical documentation in English;
• Proficiency in spoken and written English (especially in technical writing).

Desirable:

• A diploma in IT security;
• Experience with Verinice tools in the ISO framework;
• Hands-on knowledge on SINA, Stormshield, Prim’X product lines.

Duties/role:

• Providing support and recommendations to the development teams and project managers of classified CISs regarding security accreditation:
• Reviewing the development/system documentation;
• Analysing and elaborating recommended approach/solution;
• Working in cooperation with the development teams;
• Following up on and running the accreditation process of these CISs in accordance with Client regulations:
• Developing the accreditation documentation as defined in Security Notice 2019-1890;
• Developing risk assessment using formal methodologies;
• Performing a regular review of the Approval-To-Operate;
• Providing support to the security inspections;
• Investigating and elaborating proof-of-concept solutions that could be accredited and integrated into classified CISs after their industrialization:
• Integrating existing security approved/certified components;
• Testing and evaluating prototypes;
• Preparing the accreditation;
• Preparing its industrialization via contract.

Additional information:
If you are interested, for further information, please contact the point of contact for this offer.

VECTOR SYNERGY sp. z o.o., ul. Marcelińska 90, 60-324 Poznań, NIP PL7811857270, REGON 301575740, KRS: 0000369575
Rejestr Przedsiębiorców KRS prowadzony przez Sąd Rejonowy Poznań – Nowe Miasto i Wilda w Poznaniu, VIII Wydział Gospodarczy KRS, kapitał zakładowy wynosi: 73.852,80 złotych wpłacony w całości, TEL +48 616684500, FAX +48 616684501, www.vectorsynergy.com, info@vectorsynergy.com