C005045 Cyber Security Software Engineer (CDSA) (NS) BELGIUM - 18 Aug

Deadline Date: Tuesday 18 August 2026



Requirement:   Cyber Security Software Engineer (CDSA)



Location: Mons, BELGIUM



Full Time On-Site: Yes.



Time On-Site: 100%



Not to Exceed Rate: 67 EUR



Total Scope of the request (hours): 560



Required Start Date: 23 September 2026



End Contract Date: 31 December 2026



Required Security Clearance: NATO SECRET


Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:

1. Current National or NATO SECRET clearance
2. Nationality of one of the NATO member countries
3. Current work visa for the specific location if applying for an in-country position

Any applications that do NOT meet all the above - and do not CLEARLY show these on the CV - will be deleted.



Duties & Role:

• We are looking for a hands-on Cyber Security Software Engineer to support the Cyber Defence Situational Awareness (CDSA) platform.
• The role combines technical development work (mainly in Splunk) with operational support and close coordination with both the development contractor and CyOC users. The engineer will contribute to the continuous improvement of CDSA dashboards, data integrations, and operational capabilities.

Under the direction of the DICE Team Lead the contractor shall:



Technical Development & Maintenance

• Develop and maintain CDSA dashboards, visualizations, and UI components in Splunk.
• Perform hands-on work on data models, KVStore collections, scheduled searches, and macros.
• Implement small to medium enhancements and fixes based on operational needs and user feedback.
• Support the integration of new data sources and tools into CDSA (e.g. PLM, ACPV, Cribl, etc.).
• Develop scripts and automation to improve data processing and platform operations.

Operational Support & CyOC Coordination

• Provide technical and operational support to CyOC users on a day-to-day basis.
• Act as a technical bridge between CyOC operational needs and the development contractor (Infigo/King ICT).
• Validate and test new dashboards and features delivered by the contractor before they go into production.
• Collect and prioritize user feedback from CyOC and translate it into actionable technical tasks.
• Support Early Life Support (ELS) activities for new features and releases.

Platform Health & Improvement

• Monitor dashboard performance, data quality, and overall platform health.
• Identify opportunities for improvement in existing dashboards and data pipelines.
• Contribute to the technical roadmap and evolution of the CDSA platform.

Specific Working Conditions:

• NCIA IT equipment will be provided for the processing of restricted information.
• The contractor may be permitted to perform work remotely, from a different NATO nation than the duty location, for up to a maximum of twenty percent (20%) of their total working time, subject to prior approval by their NCIA designated Resource Manager.
• If working from a remote location, the contractor shall provide IT equipment for the processing of public and unclassified information in support of their duties, including the capability to participate in video meetings using Microsoft based collaboration tools.
• The contractor may be required to travel to other NCIA locations for in-person or department meetings. In such cases the contractor will be reimbursed for travel costs according to NATO regulations for traveling on NATO duty. Each travel will be a maximum of 2 days lengths and happening no more than twice per month. Contractors traveling for work purposes shall initiate travel requests from their designated duty station only.

Requirements

Skills, Knowledge & Experience:

• The candidate must have a currently active NATO SECRET security clearance
• A minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience;
• Or exceptionally, the lack of a university degree may be compensated by he demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work.
• At least 3 years practical and hands-on experience in Splunk (dashboard development, data models, KVStore, macros, scheduled searches).
• At least 3 years practical and hands-on experience in Splunk UI development and visualization best practices.
• At least 3 years practical and hands-on experience in scripting (Python, Bash, or similar).
• At least 3 years practical and hands-on experience in interacting with REST APIs or similar
• At least 3 years practical and hands-on experience in interacting with Databases
• Good understanding of cybersecurity concepts (vulnerability management, threat intelligence, incident management).
• Good communication and analytical skills — able to translate technical topics for operational users and vice versa.
• Strong analytical and problem-solving skills.
• Ability to work operationally with end users while also performing technical development work.
• Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency".