Job Description
The Cybersecurity Directorate safeguards the IT security of the data and systems of the FPS Home Affairs and strives to stay ahead of cybercriminals. We proactively identify risks and raise timely alerts.

What can you expect from us?

You will join the operational heart of the FPS Home Affairs and contribute to the security of the country. You are responsible for leading all agents in our 'first response team'.

The NOC SOC team (Network Operations Center/Security Operations Center) ensures the IT security of the data and systems of the FPS Home Affairs and stays one step ahead of cybercriminals. We proactively identify risks and raise timely alerts.

What does your range of tasks actually consist of?

As a Senior Network Security Engineer, you play a key role in protecting the organization's network infrastructure against internal and external threats. You are responsible for designing, implementing, and monitoring network security measures that contribute to the resilience and reliability of our IT environment.

You work closely with the NOC/SOC team, network architects, and cybersecurity managers, and actively contribute to the organization’s overall security strategy.

Employer

The FPS Home Affairs ensures your safety. To make our mission a success, we invest in a secure and stable IT environment.

We are currently looking for a Senior Network Security Engineer for the General Directorate Innovation and Digital Solutions (AD DIO) (Finance Tower – Boulevard du Jardin Botanique 50, box 90 – 1000 Brussels) of the FPS Home Affairs.

GENERAL MANAGEMENT OF INNOVATION AND DIGITAL SOLUTIONS

The General Directorate Innovation and Digital Solutions develops a general ICT strategy and manages common system and network infrastructures. We support and strengthen the various services of the FPS Home Affairs. Our ICT helpdesk is always ready to assist you and we support management in their IT projects and application development.

The General Directorate Innovation and Digital Solutions is a small department focused on a positive working atmosphere and collaboration. You will join a small, close-knit team of professionals who share the same passion for the field. We value trust and expertise and therefore offer plenty of opportunities to refine your knowledge.

FPS Home Affairs

Security, crisis management, fire and burglary prevention, management of the National Register, organization of elections, issuing identity cards, management of migration flows… The FPS Home Affairs does all this and much more.

Your safety is our business. As FPS Home Affairs, we create a safe society in which citizens dare to take initiative and seek connection with each other. In the workplace as well, we strive for an open organizational culture in which you as a colleague have the space to participate in decision-making, to think along, and certainly also to get involved.

Our FPS has more than six thousand employees, spread across the six general directorates (Civil Security, Crisis Center, Immigration Office, Security & Prevention, Identity and Civil Affairs, Innovation and Digital Solutions), the management directorates, the coordination & support services, and the four independent organizations (General Commission for Refugees and Stateless Persons, Council for Alien Disputes, Permanent Commission for Language Control, and Federal Governor Services).

SKILLS

Core Responsibilities

1. Design and implementation of network security

2. Developing network security strategies according to best practices and regulations.

3. Configuring, maintaining, and improving security devices such as next-gen firewalls, VPN solutions, proxy servers (forward/reverse), and load balancers.

4. Applying and managing Zero Trust Network Access (ZTNA) principles.

5. Monitoring and performance management

6. Continuously monitoring network traffic using SIEM, IDS/IPS, and other detection tools.

7. Conducting security audits and vulnerability assessments, including reporting and recommendations.

8. Managing network performance and secure connections such as ExpressRoute, ISP links, and corporate WiFi.

9. Incident response and technical support

10. Quickly diagnosing and resolving security incidents.

11. Providing high-level technical support to other departments.

12. Documenting incidents and contributing to post-mortem analyses and improvement processes.

13. Automation and efficiency

14. Developing scripts to automate routine tasks using tools such as Python, Bash, or PowerShell.

15. Integrating security tools into existing infrastructure and workflows.

General Skills

• Communication: ability to clearly explain complex technical concepts to non-technical stakeholders.
• Problem-solving: analytical and decision-oriented thinking.
• Leadership: coaching junior team members, sharing knowledge, and leading teams when needed.
• Adaptability: quickly responding to technological changes.
• Time management: effective multitasking and prioritization in a project-driven environment.

Technical Expertise

• Network management and routing: experience with routing (dynamic/static, interdomain), DNS, TACACS, ExpressRoute, and network architecture.
• Network security: extensive knowledge of firewalls, VPNs, proxy servers, WAFs, and load balancers.
• Cloud security: protection of hybrid cloud environments (Azure, AWS), data encryption, and access control.
• Incident management: experience with CSIRT/CERT processes and threat analysis.
• Automation: scripting skills for efficiency improvement.
• Operating systems: familiar with Linux and Windows environments.
• Security standards and protocols: familiar with ISO/IEC 27001, NIST, cryptographic protocols, and RFC standards.

Valued Certifications

The following certifications are considered an asset:

CISSP, CISM, GIAC GCIH / GSTRT, CEH, CTIA, CompTIA Security+, Cisco CyberOps.

Willingness for continuous training and professional certification in network and security domains.

Requirements

• In possession of or ability to obtain accreditation at the Secret level (EU and National).
• Integrity and discretion when handling sensitive information.
• Up-to-date knowledge of cybersecurity threats and trends.

Note: A security clearance is mandatory for this position. The assignment is extendable.