C005302 Cyber Security Incident Responder

• Providing 24/7 Cyber Security Incident Response activities (triaging, containing, eradicating, and recovering), during normal working hours and occasional on-call duties, including weekends and holidays;
• Delivering technical coordination, support, and assistance for Cyber Security Incident Response to NATO CIS Operating Authorities, including NATO Nations, Partner Nations, non-Governmental Organisations, and Industry Partners;
• Leading, participating in, or supporting Cyber Security Response Teams designated to extend NCSC Incident Response coverage across one or multiple physical locations, including NATO Alliance Operations and Missions.

• Recent practical, hands-on experience of Intrusion Detection and Incident Response (TRIAGE, Contain, Eradicate, Recover) in an enterprise-level Computer Emergency Response Team, ideally making use of the MITRE ATT&CK framework;
• At least 3 years experience in Information and Knowledge Management, ideally in the field of Cyber Security;
• Experience in interfacing with IT Service Management.

Desirable:

• Hold a University degree in Cyber Security or IT Security-related discipline or Information Management;
• Practical experience working with, and/or formal research, of the use of AI/LLM within Cyber Security Defense (not from a red team / penetration testing perspective);
• Practical experience in the management of vulnerabilities, from ingestion, scoring, assessing prioritization of, and potential impact to CIS.