C004920 Cyber Security Officer (CTS) - THU 30 Jul RELAUNCH

The service line decided to run another round under AAS due to a previously unsuccessful round. The previously proposed candidates were non compliant due to lack of "A" (ATOMAL) in their clearances. Therefore, CTS-A is mandatory.

Deadline: Thursday 30 July 2026
Requirement: Cyber Security Officer
Location: Ramstein, DE
Full Time, On-Site: Yes
Time On-Site: 100%
Total Scope of the request (hours): 836
Required Start Date: 31 August 2026
End Contract Date: 31 December 2026
Required Security Clearance: COSMIC TOP SECRET-ATOMAL

Duties & Role

In support of CSU Ramstein's mission, the individual is responsible to develop effective, agile and resilient cyber security solutions tailored to specific operational requirements and environmental conditions. The incumbent will consult with stakeholders to evaluate functional requirements and translate them into technical solutions, design, develop, test and evaluate information system security throughout the systems development life cycle, and analyze and develop integration, testing, operations and maintenance of systems security.

• Applies and maintains specific security controls as required by organisational policy and local risk assessments.
• Communicates security risks and issues to business managers and others.
• Performs basic risk assessments for small information systems.
• Contributes to the identification of risks that arise from potential technical solution architectures.
• Suggests alternate solutions or countermeasures to mitigate risks.
• Defines secure systems configurations in compliance with intended architectures.
• Supports investigation of suspected attacks and security breaches.
• Leads a team of 3–4 Cyber Security and COMSEC personnel through day-to-day operations.
• Responsible as the Cyber Security Section Head for the administration of all aspects of Cyber Security activities in coordination with the NATO Cyber Security Centre (NCSC), including boundary protection management, data loss prevention and enterprise antimalware.
• Schedules, coordinates and facilitates security audits and inspections, and manages post‑inspection actions.
• Supervises monitoring, testing, evaluating computer security systems and the evaluation of Cyber Security aspects of CIS Accreditation.
• Plans and as necessary implements Cyber Security services in support of Agency SLs, DSO, Strat and other Agency organisational elements as applicable.
• Can support physical task requirements with the ability to lift up to 25 lbs.
• Deputises for higher‑grade staff as required.
• Performs other duties as required.

Specific Working Conditions

• The mandatory working time shall be 38 hours per week, to be performed Monday to Friday.
• A daily unpaid lunch break shall be taken in accordance with local regulations and Agency practices.
• The Contractor shall maintain personal liability and comprehensive insurance coverage for the duration of the contract.
• Work may be performed on‑site at the designated location and/or remotely, in accordance with project requirements and subject to prior approval by the Agency.
• The Contractor shall ensure reliable communication, availability during agreed working hours, and secure access to all required Agency systems, networks and documentation platforms, in compliance with applicable security, information assurance and data protection policies.

Skill, Knowledge & Experience

• Security clearance (COSMIC TOP SECRET-ATOMAL, CTS-A), provided by the national security organisation valid at the time of submission of the bid and covering the period of the contract.
• Minimum of 5years of experience in Windows Server security hardening, including implementation of security baselines, policy enforcement, vulnerability mitigation and system compliance.
• At least 3years of experience with Trellix ePolicy Orchestrator and Trellix Endpoint Security, including Trellix Data Loss Prevention and Trellix Application Control (or equivalent security software).
• 2years of experience with system security, security architecture, network security engineering, security governance and risk management.
• Detailed knowledge and working experience of security and networking technologies including IPv4, software‑based firewalls, VPNs, intrusion detection and forensic tools.
• Practical experience with wireless LAN technologies and endpoint security of mobile devices including laptops, tablets and smartphones.
• Security incident handling, interpretation of cyber security audit results and conducting risk assessments.
• Identifying and mitigating security vulnerabilities.
• Supporting NATO Enterprise CIS, knowledge of NATO responsibilities and organisation, including the NATO Command Structure, ACO & ACT and knowledge of NATO Security Policy and supporting directives.
• CISM or CISSP certification.
• Bachelor's degree at a nationally certified university in a related discipline and 2years post‑related experience.

Excepti