Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
• Some projects may require business travel to other sites
• Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
• Arrival 06:00 to 09:00
• Lunch break Minimum 30 minutes 11:45 – 13:45
• Departure 16:15 to 20:00
• Friday
• Arrival 6:00 to 9:00
• Departure 12:15 to 17:00
• Public Holiday of Luxenberg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

 Mandatory Requirements

1. Professional Experience
1. Proven experience of at least 5 years in IT Cyber Security.
2. Proven experience of at least 1 year in a NATO environment.
2. Proven experience and skills (Minimum 8 of the below)
1. Next Generation Firewalls (including Intrusion Detection/Prevention System), 
2. Web Application Firewalls and Reverse Proxies, 
3. Web Proxies
4. E-mail gateways
5. Vulnerability Management
6. Anti-malware, sandboxing and endpoint protection technologies
7. Public Key Infrastructures (PKIs), smartcards and user authentication technologies
8. Mobile Device Management (MDM)
9. Apple infrastructure and iOS management
10. Security Incident Event Management (SIEM) 
11. Multi-Factor authentication
12. Privileged Access Management
13. Good Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies
3. Skills
1. Good Knowledge - Web application penetration testing
2. Good Knowledge - Mobile application penetration testing
3. Good Knowledge - Source code vulnerability analysis
4. Good Knowledge - Ability to identify and exploit web vulnerabilities  (XSS, CSRF, SQLi, SSRF, arbitrary file upload, etc.) 
5. Good Knowledge - Ability to identify and exploit mobile vulnerabilities  (API issues, insecure storage, memory corruption, deep links, etc.) 
6. Good Knowledge - Network penetration testing experience 
7. Good Knowledge - Protocol analysis 
8. Good Knowledge - CTF experience
9. Good Knowledge - Secure coding practices 
10. Good Knowledge - Cryptography 
11. Good Knowledge - Red and Blue team experience
4. Proven knowledge of
1. Good Knowledge - Cloud Architecture and Security
2. Good Knowledge - Operating System (Windows and Linux) security and of Active Directory security
3. Good Knowledge - Networking protocols
4. Good Knowledge - Application Security
5. Experience allowing to write scripts efficiently - Programming Skills in Bash or Python or Perl
6. Good Knowledge - Offensive security tactics, techniques, tools and procedures
7. Triage, following, procedures pro-active pivoting and hunting - Handling security alerts (ex: antivirus alert, suspicious email report)
8. Good Knowledge - Handling security incident/intrusion 
5. Language
1. Proficiency in English, written and oral, equivalent to CEFR B2 or higher
2. Ability to write clear and concise reports and technical documentation with proper justification
3. Ability to explain issues at different levels of the hierarchy and in particular to management
6. Security Clearance
1. Hold a valid NATO SECRET (or higher) security clearance

Spektrum supports apex purchasers (NATO, UN, EU and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.

Background

NATO Support and Procurement Agency (NSPA) operates a large Local Area Network (LAN). NSPA also provides services to both internal users and external customers from systems hosted in several data centres. To deliver a wide range of Computer Information System (CIS) services, the whole ICT infrastructure is stretched across the LAN and numerous DMZs, requiring security protection and defence in depth with several layers of cyber protection

Project Duration

3 years

Duties and Responsibilities

• Design, document and provide assurance that the NSPA cyber security architecture is secured.
• Assess new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Evaluate vulnerabilities and design mitigations.
• Provide Cyber Security advisory and recommendations.

Skills and Experience

• Proven experience of at least 10 years - on medium/large projects – on complex and reliable security architecture.
• Proven experience of at least 3 years in a NATO environment.
• Proven experience in leading a full NATO system accreditation
  • Design, System Specific Security Requirement Statement (SSRS)
  • Security Operating Procedures (SecOps)
  • Concept of Operations (Con Ops).
• Proven experience and skills in the following areas:
  • Next Generation Firewalls
  • Web Application Firewalls
  • E-mail gateways
  • Intrusion Prevention System
  • Vulnerability management
  • Mobile Device Management
  • Apple infrastructure and iOS management
  • Web Proxies
  • Reverse Proxies
  • Anti-malware and endpoint protection technologies
  • Public Key Infrastructures (PKIs) and Security Incident
  • Multi-Factor authentication
  • Privileged Access Management
  • Event Management (SIEM) systems.
• Proven knowledge of:
  • Cloud Architecture and Security
  • Microsoft 365 security
  • Operating System (Windows and Linux) security and of Active Directory security
  • Networking protocols
  • Application Security
• Offensive security tactics, techniques, tools and procedures:
  • Security incident/intrusion handling
  • Project management
• Experience in triage of security alerts.
• Proficiency in English, written and oral, equivalent to CEFR B2 or higher
• Ability to explain issues at different levels of the hierarchy and in particular to management
• Ability to write clear and concise reports and technical documentation with proper justification

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
  • Some projects may require business travel to other sites
  • Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
  • Arrival 06:00 to 09:00
  • Lunch break Minimum 30 minutes 11:45 – 13:45
  • Departure 16:15 to 20:00
• Friday
  • Arrival 6:00 to 9:00
  • Departure 12:15 to 17:00
• Public Holiday of Luxenberg will be applicable

Security Clearance

• Valid NATO SECRET Personal Security Clearance

Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We seek personnel to join our team and support key client projects.

Introduction

The Automated Integrated Product Support (IPS) Programme Office (LN) of the NATO Support and Procurement Agency (NSPA) is responsible to provide responsive, effective and cost-efficient electronic, automated and integrated logistic support on behalf of NATO or NATO Member Nations.

NDSS is an automated and integrated logistics software support tool designed, developed and supported by NSPA. It covers the main logistic functionalities such as item management, stock management, requisitioning, procurement, fleet management, transport request, maintenance and repair, property accounting and property disposal.

The modules of the application software are written in PowerBuilder and Microsoft .Net, and are implemented in a client/server environment. Web front-end of NDSS is implemented using 3-tier Architecture.

NDSS is active in 31 user organizations across NATO and areas of NATO operations.

NSPA is involved in different development projects regarding the functional evolution of NDSS and its maintenance and is also involved in the support of other integrated logistics tools.

The contracted staff shall assist NDSS team in developing and implementing different projects based on PowerBuilder and .Net technologies.

Role Responsibilities

The Senior Business Analyst shall work with the IT team on different projects and shall carry out various types of activities such as analysis, documentation. He / she shall have the following tasks and responsibilities:

• Processes analysis and modelling - UML
• Analysis of new requirements and amendments
• Update and enhancement of the documentation (such as BPM, use cases)
• Proposal of recommendations to enhance user and technical documentations
• Analysis of reports and dashboard defined with SSRS

Required Skills and Experience

Involved in the analysis of various logistics systems, this profile must have a good methodical and analytical spirit as well as very good writing skills.

An experience of 7 years minimum in IT and 5 years in analysis is necessary. It is moreover important to have a professional experience and certification in Enterprise Architect (or equivalent).

• Education and Professional Certifications
  • Certification in Enterprise Architect (or equivalent).

• Professional experience with minimum 7 years:
  • Analysis – UML modelling
  • Writing of documentation (UC, BPM, BPMN)

• Professional experience with minimum 5 years:
  • Enterprise Architect (or similar product)

• Professional experience with minimum 3 years:
  • Integration with SQL Server 2016 database platforms, including tables, views, queries
  • Transact-SQL
  • SQL Server Management Studio
  • Application Lifecycle Management

• Professional experience with minimum 1 year:
  • XML / XMI / XSLT
  • Logistics environment

• Soft Skills:
  • Communication
  • Team Player
  • Autonomy
  • Flexibility and adaptability
  • Good methodical and analytical spirit
  • Very good writing skills
  • Perseverance and precision
  • Good interpersonal skills

Security Clearance

• National Secret or NATO Secret Clearance

Language Requirements

• Mandatory English, French desirable – STANAG 6001 SLP 3333.

Work Arrangement

• Onsite - Capellen, Luxembourg.
• 215 working days per year
• 40 working hours per week, Monday to Friday.

The Principal Solutions Architect will own the end‑to‑end design of complex customer/prospect solutions built on top of our social media management platform, with a strong focus on integrations, workflows, and measurable business value. This person will act as the bridge between customer‑facing teams (mostly AMs and AEs) and Product & Tech: translating client use cases and operational constraints into robust technical architectures, and turning those architectures into clear, actionable briefs for our product managers and engineering teams. In line with Hootsuite's distributed workforce strategy, our flexible work arrangement allows for remote work. This role is open to applicants located in London, England, United Kingdom and Luxembourg, Luxembourg. In this role, you will report to the Solutions Director.

WHAT YOU’LL DO:

• Participate in strategic client / prospects meetings and discovery workshops with strategic/enterprise accounts to understand business objectives, current tools, and operational constraints.
• Challenge and refine client requirements, uncovering underlying needs and proposing pragmatic solutions grounded in our platform capabilities.
• Articulate complex technical concepts in simple, non‑technical language to senior business stakeholders (CMO, Head of Social, Customer Care, Digital, Data teams).
• Act as a trusted advisor on topics such as social data architecture, governance, workflow design, and integration strategy notably on RFP or RFI. 
• Lead the design of end‑to‑end solutions that leverage our core platform capabilities (publishing, engagement, listening, analytics, governance) and integrate with external systems (CRM, customer care platforms, marketing automation, data warehouses, BI tools, etc.).
• Translate complex integration requirements (APIs, webhooks, SSO, data sync, custom workflows) into user‑centric, value‑oriented solution designs.
• Produce clear architecture artefacts when needed: solution blueprints, sequence diagrams, data flow diagrams, and configuration guides.
• Evaluate feasibility, risks, and trade‑offs of different solution approaches, always balancing speed, robustness, and scalability.
• Translate client and operational needs into structured, actionable briefs for Product and Engineering:
  • Clear problem statements and business context.
  • Detailed functional and non‑functional requirements.
  • Edge cases, constraints, and acceptance criteria.
• Work closely with Product Managers to prioritise requirements, shape roadmaps, and assess build‑vs‑configure‑vs‑integrate options.
• Partner with Engineering to validate technical designs, refine implementation details, and ensure solutions we would be pushing to our clients/prospects are aligned with platform architecture and standards or alternatively set guardrails and manage expectations.
• Provide feedback loops from the field back into the product: recurring patterns, blockers, integration gaps, and opportunities for new capabilities.
• Guide project teams (PS, Customer Success, Partner teams) during implementation as the “design authority” for the solution.
• Review technical configurations and integration setups to ensure they adhere to the agreed architecture and best practices.
• Help define standards, patterns, and reusable assets (templates, reference architectures, integration playbooks) that make future projects faster and more consistent.

WHAT YOU’LL NEED: 

• Extensive years of experience in a relevant role: Solutions Architect, Solutions Engineer, Senior Solutions Consultant, Technical Consultant, or similar in a SaaS / digital platform environment.
• Strong experience with integration‑heavy solutions involving APIs, webhooks, SSO/identity, and data pipelines.
• Experience working with at least some of the following: CRM (Salesforce, Dynamics, HubSpot, etc.), contact centre / ticketing tools (Zendesk, ServiceNow, etc.), marketing automation, CDP/DMP, data warehouses/BI tools.
• Background in social media / digital marketing / customer care platforms is a strong plus, ideally with tools like Hootsuite, Sprinklr, Sprout, Khoros, Brandwatch, Talkwalker, etc.
• Proven track record acting as a bridge between business stakeholders and technical teams, ideally in a role reporting into a Solutions / Professional Services / Customer Success organization.
• Solid understanding of modern web and SaaS architectures: RESTful APIs, webhooks, OAuth/SSO, microservices, event‑driven workflows.
• Ability to read API documentation, reason about data models, and specify integration patterns (batch vs real‑time, push vs pull, error handling, monitoring).
• Comfort discussing technical topics with engineers (data structures, rate limits, performance considerations) even if you are not the one writing production code.
• Familiarity with data concepts: data mapping, normalization, basic SQL or BI concepts, and how social data flows into broader customer data ecosystems.
• Strong ability to translate technical possibilities and limitations into clear business impacts and trade‑offs.
• User and value‑oriented mindset: always able to answer “who is this for, what changes for them, and how do we measure success?”.
• Comfortable working in a fast‑moving environment with evolving requirements; able to iterate quickly while maintaining architectural rigor.
• Customer Focus: Demonstrated desire to proactively help internal/external customers meet their needs
• Open Communication: clearly conveys thoughts, both written and verbally, listening attentively and asking questions for clarification and understanding
• Collaboration and Teamwork: working with others to deliver results, meaningfully contributing to the team, being a dependable partner

WHO YOU ARE: 

• Solution seeker. You’re focused on tackling new challenges, solving problems, and moving the business forward—and you don’t wait to be asked.
• Lifelong learner. You have a growth mindset – you’re here to learn, experiment, seek, apply, and provide feedback, share what works with your team, and move on from what doesn’t.
• Resilient adapter. In the face of change and challenges, you bring a thoughtful, calm approach, and a focus on finding the new opportunity.
• Intentional collaborator. You build positive working relationships across the business, bringing people together to foster new opportunities and to facilitate the efficient flow of information.
• Critical challenger. You have the trust in your team to ask difficult questions in order to get to the best end result.
• Active communicator. You listen actively and communicate ideas and information clearly, inclusively, and proactively.
• Integrated thinker. You look beyond your role and responsibilities to understand how your team’s work drives broader organizational goals.
• Accountable owner. You take pride in the work you’re responsible for with a mindset of ultimate accountability and reliability for the outcomes.
• Bar-raiser. You step up to help your team grow and succeed, even when that means going beyond what might be expected.

In all we do, our six guiding principles light the way:

Step Up: Dare to go beyond the expected to achieve greatness. #StepUp

One Team: Make Hootsuite a place we soar together by respecting each other's individuality, building trust, and showing up for the team. #OneTeam #FreeToBeMe

Customer Obsessed: Focus relentlessly on helping our customers succeed. #CustomerObsessed

Go Fast, Be Agile: Widen our competitive advantage by committing to speed and simplicity over perfection and complexity. #GoFastBeAgile

Play to Win: Commit to building an incredible, profitable company for our customers, our employees, and our stakeholders. #PlayToWin #NoExcuses

Neighbours & Allies: Give back to our communities and be an ally. #SocialForGood #Allies

 Accommodations will be provided as requested by candidates taking part in all aspects of the selection process.

#LI-Remote #LI-IA