Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting 

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – 2026-0057

Role Background

To support the NCSC with the execution of tasks identified in the subject work package of the service, the NCI Agency is looking for experienced penetration testing professionals to augment the existing teams in order to respond to the increasing demand for high quality security assessments and expertise.

This contract is to provide consistent support on a deliverable-based (completion-type) contract, to NCSC contributing to its POW based on the deliverables that are described in the scope of work below.

Role Duties and Responsibilities

• Provide Web, infrastructure and application-level penetration testing, including but not limited to COTS software and NOTS/GOTS software (NATO/Government off the Shelf), following clearly defined methodologies.
• Participate in kick-off meetings with stakeholders and technical points of contact in order to identify requirements for testing.
• Follow the documented procedures and workflows outlined by the technical leads
• Attend team meetings if required
• Write technical reports in fluent English, following defined templates and Reporting Tools.
• Brief at both executive and technical levels on security reports and testing outcome, including at flag officer level.
• In case of new vulnerabilities detected for COTS software, follow the Responsible Disclosure Process and follow-up with vendors and stakeholders.
• In co-ordination with the Technical Lead of the Penetration testing team, ensure proactive collaboration and coordination with internal and external stakeholders.
• Stay abreast of technological developments relevant to the area of work.
• Perform any other duties as may be required.

Essential Skills, Experience and Certifications

• Web application penetration testing
• IT infrastructure penetration testing
• Network security architecture design
• Assessing security vulnerabilities within OS, software, protocols & networks
• Researching and evaluating security products & technologies
• Knowledge in system and network administration of UNIX and Windows systems
• Use of penetration testing tools, techniques, and recognized testing methodologies
• Scripting skills in at least one of the following: Python, Go, PowerShell, shell (bash, ksh, csh)
• Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.
• Ability to evaluate risks and formulate mitigation plans.
• Proven ability to brief at executive level on security findings, reports and testing outcome.
• Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences.

Language

• A thorough knowledge of one of the two NATO languages, both written and spoken, is essential and some knowledge of the other is desirable.

NOTE: Most of the work of the NCI Agency is conducted in the English language.

Desirable

• Professional qualifications: OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application Tester, GXPN, GWAPT or equivalent
• Familiarity with risk analysis methodologies.
• Prior experience of working in an international environment comprising both military and civilian elements.
• Knowledge of NATO organization, internal structure and resultant relationships.
• Prior experience of working in an international environment comprising both military and civilian elements.
• Knowledge of NATO organization, internal structure and resultant relationships.

Working Location

• Mons, Belgium

Working Policy

• Onsite

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting 

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – C004805

Role Duties and Responsibilities

• Maintain the master project plan and detailed work schedules in the agreed planning tool, updating progress weekly from workstream leads and flagging slippage or critical path risks to the Project Manager.
• Prepare look-ahead schedules, Gantt charts, and milestone trackers for use in project board meetings and team briefings.
• Support re-planning exercises at stage boundaries or when approved changes require a revised baseline.
• Own and maintain the RAID log (Risks, Actions, Issues, Dependencies), chasing owners for updates and escalating overdue items.
• Maintain the Risk Register, Issue Register, Lessons Log, Quality Register, and Decision Log, ensuring entries are current, consistently formatted, and reviewed at the appropriate governance forum.
• Track change requests through the change control process, recording the details of each approved change against the baseline.
• Establish and maintain the project filing structure, enforcing version control, naming conventions, and access permissions across the shared workspace.
• Manage the flow of project documents — distributing pre-reads, collecting sign-offs, archiving approved deliverables, and ensuring the team always works from the latest version.
• Act as configuration librarian where required, tracking the status of all formal project products.
• Track project expenditure against the approved budget, recording actuals, commitments, and forecasts and flagging variances to the Project Manager.
• Process purchase orders, timesheets, and contractor invoices through the agreed workflow, ensuring costs are coded to the correct budget lines.
• Maintain the resource allocation schedule and highlight conflicts or gaps requiring management attention.
• Coordinate site access arrangements for audit teams, refresh contractors, and specialist surveyors, liaising with local security points of contacts to secure the required access.
• Maintain the site visit schedule, tracking confirmed dates, access permits, security clearances, and any site-specific induction or health and safety requirements that must be completed before arrival.
• Maintain a site access tracker that records visit outcomes — completed, rescheduled, or denied — and flags sites with repeated access difficulties to the Project Manager for escalation to the Vendor Manager or client.
• Coordinate with contractors and internal teams to sequence site visits efficiently, grouping geographically close sites into logical routes and avoiding clashes where multiple teams require access to the same location.
• Ensure all site visit documentation — access request forms, risk assessments, method statements, and photographic evidence of completed work — is collected, filed, and linked to the relevant site record in the project filing structure.
• Draft highlight reports, checkpoint reports, and dashboard packs for the Project Manager's review, pulling together schedule, cost, risk, and quality data into a clear narrative.
• Organise all project meetings — booking rooms or virtual sessions, preparing agendas, circulating papers, and confirming attendance.
• Take accurate minutes, record decisions and actions with owners and deadlines, and follow up on outstanding actions between meetings.
• Maintain the forward calendar of stage gates, board meetings, and quality reviews, ensuring all required inputs are prepared on time.
• Act as the first point of contact for administrative queries from team members, directing people to the right templates, processes, or escalation routes.

Essential Skills, Experience and Certifications

• Strong proficiency in project scheduling tools — ideally Microsoft Project and ServiceNow
• Advanced Excel skills including pivot tables, lookups, conditional formatting, and the ability to build and maintain cost trackers and resource models.
• Confident user of Microsoft 365 (SharePoint, Teams, Word, PowerPoint) for document management, collaboration, and reporting.
• Ability to build clear, concise dashboards and visual reports that translate raw data into RAG statuses, trend charts, and exception summaries for senior audiences.
• Familiarity with project management information systems (PMIS) or portfolio tools
• Exceptional attention to detail — the kind of person who notices a version number is wrong, a date has shifted, or a name is misspelled before it reaches a board pack.
• Highly organised with the ability to manage multiple concurrent tasks, deadlines, and information flows without dropping things.
• Strong written communication — able to draft clear, grammatically correct minutes, reports, and status updates that require minimal editing by the Project Manager.
• Proactive and self-starting — able to anticipate what the Project Manager will need next rather than waiting to be asked.
• Diplomatic and persistent when chasing actions from colleagues, contractors, and senior stakeholders who may not prioritise the PSO's requests.
• Comfortable working across all levels of seniority, from site teams to the project board, and adapting communication style accordingly.
• Calm under pressure, particularly during busy reporting periods, stage gates, or when multiple deadlines converge.
• Trustworthy with sensitive information — the PSO will have visibility of financial data, personnel matters, and pre-decisional papers.
• Team-oriented with a willingness to pick up whatever needs doing — the PSO role is broad and sometimes unglamorous, and the right person takes pride in making the whole team more effective.
• Willing to challenge constructively — confident enough to push back if a process is being bypassed or a standard is slipping, even when the person cutting corners is more senior.

Working Location

• Braine-l’Alleud, Belgium

Working Policy

• Hybrid (40% onsite/ 60% offsite)

Travel

• Some travel to other NATO sites may be required

Security Clearance

• Valid National or NATO Secret personal security clearance

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Who we are supporting 

The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium.

The NCIA provides a wide range of services, including:

• Cyber Security: The NCIA provides advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
• Command and Control Systems: The NCIA develops and maintains the systems used by NATO's military commanders to plan and execute operations.
• Satellite Communications: The NCIA provides satellite communications services to enable secure and reliable communications between NATO forces.
• Electronic Warfare: The NCIA provides electronic warfare services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
• Information Management: The NCIA manages NATO's information technology infrastructure, including its databases, applications, and servers.

Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.

The program

Assistance and Advisory Service (AAS)

The NATO Communications and Information Agency (NCI Agency) is NATO’s principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V.

To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categorise's: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.

Role ID – 2026-0043

Role Background

NATO Communications and Information Agency (NCIA), as the main ICT service provider in NATO, is the main technical entity providing subject matter expertise to support NATO Cyber and Digital Transformation (CDT) Branch’s Innovation Programmes of Work (PoW) and relevant activities in 2026. NCIA Chief Technology Office (CTO) is looking for a Contractor who will provide full-stack software development support to the PoW projects.

Role Duties and Responsibilities

• Support NCIA in the NATO Programmes of Work with CDT in the area of software development for digital innovation and technology applications.
• Develop advanced application capabilities for analysts, enabling the exploration, analysis, and synthesis of strategic foresight analysis data through complex, multi-step user experience workflows, including cross-article reasoning, topic engineering, source intelligence, and relevance assessment.
• Develop full-stack integrations with AI-enabled backend services, including the exposure of AI-driven analytical functions, retrieval mechanisms, and automated synthesis capabilities in a controlled and user-transparent manner.
• Apply sound software design principles to ensure transparent, auditable, and controllable analytical workflows, including clear traceability between inputs, sources, AI-assisted reasoning steps, and generated outputs, suitable for high-trust analytical and policy environments.
• Deliver deployment-ready solutions that are compatible with restricted and secure environments, including solutions subject to accreditation for NATO UNCLASSIFIED (NU) deployment, and capable of operating under governance, security, and operational constraints beyond standard commercial systems.

Essential Skills, Experience and Certifications

• Senior-level full stack development experience with at least 8 years of experience, covering: frontend and backend development, system architecture, integration, implementation and end-to-end ownership from design through deployment.
• Extensive knowledge in frontend (Vue.js, React, Astro) and backend frameworks (Python, FastAPI), including: Frontend application architecture and state management, backend API design, schema validation, and service orchestration.
• Proven experience integrating frontend applications with backend APIs and data services, including: high-volume data ingestion and querying, search, retrieval, and analytics- oriented backends, performance-aware UI–backend interaction patterns. The bidder must provide at least two project examples demonstrating the experience.
• Practical experience integrating AI and LLM-based services, including: LLM-powered analysis, synthesis, and content generation, retrieval-Augmented Generation (RAG) or hybrid retrieval approaches and deterministic, traceable, and auditable AI outputs suitable for policy and analytical use.
• Experience with designing and implementing analyst-facing workflows, with emphasis on: transparency of analytical results, traceability of sources, reasoning, and outputs, user control over inputs, filters, and relevance criteria.
• Experience working in analytical decision-support contexts or strategic foresight, including: Topic engineering and thematic analysis, source intelligence and relevance assessment, multi-source analytical synthesis.
• Ability to work independently at senior level, including: structuring complex systems from high-level requirements, translating abstract objectives into concrete technical deliverables and delivery constraints
• Experience with analytical platforms, such as strategic foresight analysis, emerging and disruptive technologies assessment, or decision-support tooling.
• Experience deploying solutions in restricted, controlled, or secure environments, including: separation of environments, controlled AI service integration, deployment constraints beyond standard commercial cloud setups
• Candidate must have the nationality of one of the NATO nations.

Language

• Excellent command of spoken and written English. 

Working Location

• Offsite

Working Policy

• Remote

Travel

This Task Order requires travel, consisting of up to 3 visits to NCIA Brussels (one per quarter) for a maximum of one working day each visit. Travel dates will be planned during the Project Kick-off Meeting with NCIA Project Manager. The travel, lodging and associated expenses for travel are included in the price of the bid (NTE), such that the purchaser shall not be invoiced.

Extraordinary Travel (Purchaser Directed Travel) may be required to other NATO or non- ATO locations as necessary. In the event of such unforeseen meetings being called, the cost of all travel and subsistence will be addressed through a contract amendment.

Extraordinary Travel expenses will be reimbursed in accordance with Article 5.5 of AAS+ Framework Contract. Such costs will be set as a separate PO line with a not to exceed value to cover and reimburse of actual expenses upon submissions of all receipts and invoices in line with NCIA processes.

Security Clearance

• Valid National or NATO Secret personal security clearance