Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
• Some projects may require business travel to other sites
• Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
• Arrival 06:00 to 09:00
• Lunch break Minimum 30 minutes 11:45 – 13:45
• Departure 16:15 to 20:00
• Friday
• Arrival 6:00 to 9:00
• Departure 12:15 to 17:00
• Public Holiday of Luxembourg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

 Mandatory Requirements

1. Professional Experience
1. Proven experience of at least 3 years in IT Cyber Security.
2. Proven experience of at least 1 year in a NATO environment.

1. Proven experience and skills (Minimum 4 of the below)
1. Next Generation Firewalls (including Intrusion Detection/Prevention System), 
2. Web Application Firewalls and Reverse Proxies, 
3. Web Proxies
4. E-mail gateways
5. Vulnerability Management
6. Anti-malware, sandboxing and endpoint protection technologies
7. Public Key Infrastructures (PKIs), smartcards and user authentication technologies
8. Mobile Device Management (MDM)
9. Apple infrastructure and iOS management
10. Security Information and Event Management (SIEM) 
11. Multi-Factor authentication
12. Privileged Access Management
13. Basic Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies

1. Proven knowledge of
1. Basic Knowledge - Cloud Architecture and Security
2. Basic Knowledge - Operating System (Windows and Linux) security and of Active Directory security
3. Basic Knowledge - Networking protocols
4. Basic Knowledge - Application Security
5. Basic Knowledge - Programming Skills in Bash or Python or Perl
6. Basic Knowledge - Offensive security tactics, techniques, tools and procedures
7. Triage following procedures - Handling security alerts (ex: antivirus alert, suspicious email report)
8. Basic Knowledge - Handling security incident/intrusion 

1. Language
1. Proficiency in English, written and oral, equivalent to CEFR B2 or higher
2. Security Clearance

Hold a valid NATO SECRET (or higher) security clearance

Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
• Some projects may require business travel to other sites
• Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
• Arrival 06:00 to 09:00
• Lunch break Minimum 30 minutes 11:45 – 13:45
• Departure 16:15 to 20:00
• Friday
• Arrival 6:00 to 9:00
• Departure 12:15 to 17:00
• Public Holiday of Luxenberg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

 Mandatory Requirements

1. Professional Experience
1. Proven experience of at least 5 years in IT Cyber Security.
2. Proven experience of at least 1 year in a NATO environment.
2. Proven experience and skills (Minimum 8 of the below)
1. Next Generation Firewalls (including Intrusion Detection/Prevention System), 
2. Web Application Firewalls and Reverse Proxies, 
3. Web Proxies
4. E-mail gateways
5. Vulnerability Management
6. Anti-malware, sandboxing and endpoint protection technologies
7. Public Key Infrastructures (PKIs), smartcards and user authentication technologies
8. Mobile Device Management (MDM)
9. Apple infrastructure and iOS management
10. Security Incident Event Management (SIEM) 
11. Multi-Factor authentication
12. Privileged Access Management
13. Good Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies
3. Skills
1. Good Knowledge - Web application penetration testing
2. Good Knowledge - Mobile application penetration testing
3. Good Knowledge - Source code vulnerability analysis
4. Good Knowledge - Ability to identify and exploit web vulnerabilities  (XSS, CSRF, SQLi, SSRF, arbitrary file upload, etc.) 
5. Good Knowledge - Ability to identify and exploit mobile vulnerabilities  (API issues, insecure storage, memory corruption, deep links, etc.) 
6. Good Knowledge - Network penetration testing experience 
7. Good Knowledge - Protocol analysis 
8. Good Knowledge - CTF experience
9. Good Knowledge - Secure coding practices 
10. Good Knowledge - Cryptography 
11. Good Knowledge - Red and Blue team experience
4. Proven knowledge of
1. Good Knowledge - Cloud Architecture and Security
2. Good Knowledge - Operating System (Windows and Linux) security and of Active Directory security
3. Good Knowledge - Networking protocols
4. Good Knowledge - Application Security
5. Experience allowing to write scripts efficiently - Programming Skills in Bash or Python or Perl
6. Good Knowledge - Offensive security tactics, techniques, tools and procedures
7. Triage, following, procedures pro-active pivoting and hunting - Handling security alerts (ex: antivirus alert, suspicious email report)
8. Good Knowledge - Handling security incident/intrusion 
5. Language
1. Proficiency in English, written and oral, equivalent to CEFR B2 or higher
2. Ability to write clear and concise reports and technical documentation with proper justification
3. Ability to explain issues at different levels of the hierarchy and in particular to management
6. Security Clearance
1. Hold a valid NATO SECRET (or higher) security clearance

Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
  • Some projects may require business travel to other NSPA Locations
  • Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
  • Arrival 06:00 to 09:00
  • Lunch break Minimum 30 minutes 11:45 – 13:45
  • Departure 16:15 to 20:00
• Friday
  • Arrival 6:00 to 9:00
  • Departure 12:15 to 17:00
• Public Holiday of Luxembourg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

Mandatory Requirements

Professional Experience

• Proven experience of at least 5 years in IT Cyber Security.
• Proven experience of at least 1 year in a NATO environment.

Proven experience and skills (Minimum 8 of the below)

• Next Generation Firewalls (including Intrusion Detection/Prevention System),
• Web Application Firewalls and Reverse Proxies,
• Web Proxies
• E-mail gateways
• Vulnerability Management
• Anti-malware, sandboxing and endpoint protection technologies
• Public Key Infrastructures (PKIs), smartcards and user authentication technologies
• Mobile Device Management (MDM)
• Apple infrastructure and iOS management
• Security Incident Event Management (SIEM)
• Multi-Factor authentication
• Privileged Access Management
• Good Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies

Proven knowledge of:

• Good Knowledge - Cloud Architecture and Security
• Good Knowledge - Operating System (Windows and Linux) security and of Active Directory security
• Good Knowledge - Networking protocols
• Good Knowledge - Application Security
• Experience allowing to write scripts efficiently - Programming Skills in Bash or Python or Perl
• Good Knowledge - Offensive security tactics, techniques, tools and procedures
• Triage, following, procedures pro-active pivoting and hunting - Handling security alerts (ex: antivirus alert, suspicious email report)
• Good Knowledge - Handling security incident/intrusion

Language

• Proficiency in English, written and oral, equivalent to CEFR B2 or higher
• Ability to write clear and concise reports and technical documentation with proper justification
• Ability to explain issues at different levels of the hierarchy and in particular to management

Security Clearance

• Hold a valid NATO SECRET (or higher) security clearance

Introduction

NSPA are looking for engineers to support their Cyber Security infrastructure to covering day to day and project activities, in addition providing Cyber Security services to NSPA customers or partners from across the NATO nations.

Day to Day Activities

• Planning and carrying out the replacement of products or technologies within the infrastructure. This will involve developing time schedules, collaborating with the helpdesk, communicating with the customers, configuring the new equipment and performing the actual migration work. Following this, documentation and diagrams will have to be updated.
• Operating and maintaining a wide variety of different cyber security solutions on a day-to-day basis, including but not limited to: Network firewall, web proxy, mail proxy and anti-spam, antivirus for servers, DMZ segregation, web application firewall, intrusion prevention, SIEM log correlation and reporting, managed file transfer, certificates, strong authentication etc.
• Providing support on various cyber security tasks and operations, such as incident response, troubleshooting, change management, write and implement security procedures for operating security solutions, lifecycle management, security and risk assessments, etc.

Project Activities

• Assessment of new cyber security products or technologies. This will involve researching the product, liaising with the manufacturer, arranging for a lab trial, conducting a test phase and then writing a report and making recommendations to NSPA.
• Design and implementation of new secure solutions for various projects and to ensure that NSPA Cyber Security posture remains adequate and aligned with best practices.
• Operating effectiveness testing and improvement of existing cyber security controls involving various cyber security technologies (including but not limited to network firewalls, Web Application firewalls, SIEM, Network IPS, e-mail protection, web browsing protection, Public Key Infrastructure, Medium and Strong authentication, etc.).
• Cyber Security advisory and support provided for various customer projects.
• Cyber Security penetration testing project.

Working Location

• Main working location: Capellen, Luxembourg (NSPA HQ)
• Some projects may require business travel to other sites
• Some remote/hybrid work may be required

Working Hours

• Monday to Thursday:
• Arrival 06:00 to 09:00
• Lunch break Minimum 30 minutes 11:45 – 13:45
• Departure 16:15 to 20:00
• Friday
• Arrival 6:00 to 9:00
• Departure 12:15 to 17:00
• Public Holiday of Luxenberg will be applicable
• Some on-call duties and weekend work will be required on a rotation basis

Project Duration

• 3 years + 2 Years

 Mandatory Requirements

1. Professional Experience
1. Proven experience of at least 5 years in IT Cyber Security.
2. Proven experience of at least 1 year in a NATO environment.
2. Proven experience and skills (Minimum 8 of the below)
1. Next Generation Firewalls (including Intrusion Detection/Prevention System), 
2. Web Application Firewalls and Reverse Proxies, 
3. Web Proxies
4. E-mail gateways
5. Vulnerability Management
6. Anti-malware, sandboxing and endpoint protection technologies
7. Public Key Infrastructures (PKIs), smartcards and user authentication technologies
8. Mobile Device Management (MDM)
9. Apple infrastructure and iOS management
10. Security Incident Event Management (SIEM) 
11. Multi-Factor authentication
12. Privileged Access Management
13. Good Knowledge - Ability to troubleshoot and solve issues involving the aforementioned technologies
3. Skills
1. Good Knowledge - Web application penetration testing
2. Good Knowledge - Mobile application penetration testing
3. Good Knowledge - Source code vulnerability analysis
4. Good Knowledge - Ability to identify and exploit web vulnerabilities  (XSS, CSRF, SQLi, SSRF, arbitrary file upload, etc.) 
5. Good Knowledge - Ability to identify and exploit mobile vulnerabilities  (API issues, insecure storage, memory corruption, deep links, etc.) 
6. Good Knowledge - Network penetration testing experience 
7. Good Knowledge - Protocol analysis 
8. Good Knowledge - CTF experience
9. Good Knowledge - Secure coding practices 
10. Good Knowledge - Cryptography 
11. Good Knowledge - Red and Blue team experience
4. Proven knowledge of
1. Good Knowledge - Cloud Architecture and Security
2. Good Knowledge - Operating System (Windows and Linux) security and of Active Directory security
3. Good Knowledge - Networking protocols
4. Good Knowledge - Application Security
5. Experience allowing to write scripts efficiently - Programming Skills in Bash or Python or Perl
6. Good Knowledge - Offensive security tactics, techniques, tools and procedures
7. Triage, following, procedures pro-active pivoting and hunting - Handling security alerts (ex: antivirus alert, suspicious email report)
8. Good Knowledge - Handling security incident/intrusion 
5. Language
1. Proficiency in English, written and oral, equivalent to CEFR B2 or higher
2. Ability to write clear and concise reports and technical documentation with proper justification
3. Ability to explain issues at different levels of the hierarchy and in particular to management
6. Security Clearance
1. Hold a valid NATO SECRET (or higher) security clearance

About us

We’re Littlepay - a growing fintech headquartered in Melbourne with operations in the UK, EU, LATAM, USA, and Australia. Our payments platform enables our customers to pay for public transport using any payment card, mobile wallet, or wearable device. Processing over USD 1 billion a year in 19 countries and continuing to expand globally, we’re proud to move more people through better payment experiences.

About the opportunity

The Littlepay Platform Team provides tooling and support for our Engineering organisation, owns shared and fundamental services, and collaborates with teams for their DevOps or infrastructure projects. Joining the Infra side of the team, you’ll be working closely with your Infra team mates and with the Platform Devex team on build systems, production support, and PCI-compliant infrastructure. You’ll encourage and support DevOps practises through tooling, vendor management and support. You’ll also work on and be on call for our base infrastructure across the platform, including networking, ECS runtime, PKI and RDS.

Key Responsibilities

This role calls for a self-sufficient engineer who can use their experience to:

• Support devops practises by maintaining tooling infrastructure and providing day-to-day troubleshooting
• Join the on-call roster for our platform across weekdays, overnights and weekends
• Consider and improve the Littlepay software ecosystem across the full build-test-deploy- release-monitor cycle
• Maintain, improve and design cost-effective and scalable PCI-compliant infrastructure
• Mentor and support platform team members
• Stay up-to-date with AWS services and industry trends
• Write and maintain internal tools, services and documentation
• Support the Littlepay engineering function

About You:

Core Skills and Attributes

• Programming and Scripting — any language, familiarity with Java, Go and Bash preferred
• Communication — we do a lot of communicating and strong written and verbal will be important
• Empathy — we’re a service provider, so having high empathy for our internal stakeholders is a big deal
• A love of learning — we take learning and growth seriously and you’ll need to be down with that

For this role we are specifically looking for candidates who are strong in:

• AWS — especially serverless runtime and cloud networking
• DevOps — releasing software is your jam, you know what a DORA metric is and how to use it to improve processes, experience with Buildkite preferred
• DevSecOps — security is at the heart of everything we do, so must be considered a fundamental part of the DevOps cycle

Our Benefits

We love to look after our people. At Littlepay, you'll be part of an inclusive and diverse team that celebrates the differences and unique gifts we each bring to work.

You’ll have access to:

• A high trust working environment, with access to cloud collaboration tools like Notion, Slack, Miro, Google Workspace, and Jira to help us work together effectively
• Paid professional development (including conferences, courses, learning subscriptions, etc.)
• Harrison Assessments - our talent management provider that facilitates continuous professional development
• A variety of flexible leave options
• A company-wide paid day off
• Our generous employee referral program
• Wellbeing support- including a free School of Life subscription for all employees
• Mid-year, quarterly, and end-of-year corporate and team events and workshops
• Short-term remote working arrangements
• International travel opportunities (dependent on role)

In-office expectations

At Littlepay, we believe great work happens when we solve problems, together. We see in-person collaboration as an important way to build connections, share ideas, and support each other meaningfully.

For those assigned to an office location, we generally expect a minimum two-day presence in the office each week. This may vary depending on your role, team, and location. For example, our team in Luxembourg works 4 days from the office, whereas our AU and UK teams currently work a minimum of 2 days onsite in our Melbourne/London offices. Some positions might require more frequent office attendance to support cross-functional collaboration, customer engagement, or specific team workflows. Your hiring manager will provide details relevant to your role.

We aim to strike a healthy balance between in-person connection and flexibility, while staying connected to deliver with speed and agility as we continue to scale, ensuring our ways of working support both our people and our shared ambition to move more people through better payment experiences.

Our Recruitment Process

If you’ve been shortlisted for the role, you’ll first have a chat with our Talent team, who will set up an interview if the stars align. A short workplace preferences questionnaire will also be sent to help us learn more about the way you prefer to work. Following a successful first interview, you’ll meet with a second set of Littlepay folks, and be invited to participate in the final stage before being presented with an offer.

If you have any questions regarding the recruitment process or if you require any accommodations for any stage in the interview process, please don’t hesitate to let us know. Additionally, if you don’t meet all of the criteria (we know that some underrepresented groups tend to avoid applying if they don’t), please still apply. We really enjoy meeting people who might bring a fresh perspective on a problem we need to solve!

Ultimately, being part of our small but mighty team means you'll have the opportunity to learn about micropayments, and have a hand in the provision of services that impact millions of people. You’ll help us deliver on our revolutionary product roadmap and help scale our platform as we continue to expand across the globe.

If this opportunity interests you, hit apply! We look forward to learning about you.