Spektrum

Endpoint Security Engineer

In short

Endpoint security engineer role supporting NATO's NCI Agency in Brussels through a defence-sector services provider, managing the full lifecycle of Trellix endpoint security products (threat prevention, application control, host firewall, DLP, drive encryption) on Windows and Linux systems. Responsibilities include security policy development, incident response, performance optimisation, and documentation within an ITIL-based IT environment. Requires recent hands-on Trellix expertise, strong problem-solving and analytical skills, and on-site work in Brussels with occasional travel. A valid National or NATO Secret security clearance is required.

About
Spektrum supports apex purchasers (NATO, UN, EU, and National Government and Defence) and their Tier 1 supplier ecosystem with a wide range of specialist services. We provide our clients with professional services, specialised aerospace and defence sales, delivery, and operational subject matter expertise. We are looking for personnel to join our team and support key client projects.
The NATO Communication and Information Agency (NCIA) is responsible for providing secure and effective communications and information technology (IT) services to NATO's member countries and its partners. The agency was established in 2012 and is headquartered in Brussels, Belgium. The NCIA provides a wide range of services, including:
•Cyber Security: advanced cybersecurity solutions to protect NATO's communication networks and information systems against cyber threats.
•Command and Control Systems: systems used by NATO's military commanders to plan and execute operations.
•Satellite Communications: services to enable secure and reliable communications between NATO forces.
•Electronic Warfare: services to support NATO's mission to detect, deny, and defeat threats to its communication networks.
•Information Management: management of NATO's information technology infrastructure, including its databases, applications, and servers.
Overall, the NCIA plays a critical role in ensuring the security and effectiveness of NATO's communication and information technology capabilities.
The program: Assistance and Advisory Service (AAS)
The NATO Communications and Information Agency (NCI Agency) is NATO's principal C3 capability deliverer and CIS service provider. It provides, maintains and defends the NATO enterprise-wide information technology infrastructure to enable Allies to consult together under Article IV, and, when required, stand together in the face of attack under Article V. To provide these critical services, in the modern evolving dynamic environment the NCI Agency needs to build and maintain a high performance-engaged workforce. The NCI Agency workforce strategically consists of three major categories: NATO International Civilians (NIC)'s, Military (Mil), and Interim Workforce Consultants (IWC)'s. The IWCs are a critical part of the overall NCI Agency workforce and make up approximately 15 percent of the total workforce.
Role ID – C005192
Tasks
•Manage the lifecycle for the product under your area of responsibility.
•Develop and maintain security policies, configurations, exclusions, exceptions and security baselines.
•Support incident response activities, work closely with other CSU teams and support Service Desk.
•Provide technical guidance and subject matter expertise for endpoint security architecture and engineering decisions.
•Plan, implement and take the lead in rolling out Trellix product upgrades at least once every two months on Windows enduser devices (laptops, workstations and VDI) and Windows and Linux servers.
•Work with other IT administrators to troubleshoot incidents and problems related to Trellix products.
•Test and implement NATO security policies for endpoint security products.
•Optimize policies of endpoint security products to improve performance and troubleshoot performance related issues.
•Work with stakeholders to ensure that configurations align with industry best practice.
•Follow existing approval processes to request required exceptions.
•Create appropriate SOPs and documentation.
•Support the development and continuous improvement for endpoint security processes, standards and governance.
Requirements
•Recent knowledge and experience in implementing and managing the entire range of Trellix products (threat prevention, application control, host firewall, DLP, drive encryption, …) on Windows enduser devices and Windows / Linux servers.
•Experience with service delivery in a complex IT environment, following ITIL processes while maintaining high levels of system availability, strong communication and coordination skills.
•Strong root cause and problem-solving skills.
•Strong documentation and knowledge sharing skills.
•Ability to work independently and take ownership of technical issues.
•Ability to analyse security events, logs, alerts and endpoint data exchange.
•Strong analytical skills.
Working conditions
•Working Location: Brussels, Belgium
•Working Policy: Working physically on-site is required to perform most daily activities. There is a limited possibility for remote work.
•Travel: Some travel to other NATO sites may be required.
•Security Clearance: Valid National or NATO Secret personal security clearance.

Stop applying.
Get referred.

$10 in free credits

In just 60 seconds, fully on autopilot — Eraldt's AI agents read your CV, map the roles you fit, find live vacancies and the people who can refer you, write personal emails, and get you referred.

This isn't an application: your CV doesn't go to the company, and we don't promise a referral for this exact role.

Discover who else lands interviews on autopilot