PRINT EEAS Headquarters IT - Security Officer-Cyber Security - DSG-DEF.MD-CIVOPSHQ.4 -HQ Contract Agent FGIV job No 471483 New opportunity Teaser Deadline for sending application: 25/03/2026at 12.00 noon (CET). Text WE ARE The European External Action Service (EEAS) supports the High Representative in the exercise of her mandate to conduct and implement an effective and coherent Union's Common Foreign and Security Policy (CFSP), to represent the EU and to chair the Foreign Affairs Council. It also supports the High Representative in her capacity as Vice-President of the Commission with regard to her responsibilities within the Commission in the external relations field, including the coordination of other aspects of the EU's external action. The EEAS works in close cooperation with the EU Member States, the General Secretariat of the Council, the services of the Commission and the Secretariat General of the European Parliament. The Civilian Operations Headquarters (DSG-DEF.MD-CIVOPSHQ) is the permanent structure supporting the Civilian Operations Commander. The Civilian Operations Commander is the overall commander at the strategic level of currently 13 civilian CSDP crisis management missions and provides strategic guidance and direction to the Heads of Mission. The Civilian Operations Commander reports directly to the High Representative and, through her, to the Council of the EU. Under the political control and strategic direction of the Political and Security Committee and the overall authority of the High Representative, the Civilian Operations Commander ensures the effective planning and conduct of civilian CSDP crisis management operations, as well as the proper implementation of all mission-related tasks. The Support Division (CivOpsHQ.4) is a dynamic Division composed currently of 35 experts in the field of Missions support: Digitalisation, CIS, Cybersecurity, Logistics, Procurement, Contracts and Financial aspects of the civilian CSDP Missions. Our job is to provide operational support for about 2.000 staff working within the 13 CSDP Missions operating in crisis countries. WE PROPOSE The position of Cyber Security Officer (IT Security Officer) - contract agent FGIV, as per article 3b of the Conditions of Employment of Other Servants of the European Union (hereafter, the \"CEOS\")[1]. The Cyber Security Officer will be integrated within the dynamic ICT & Cyber Sector of CivOpsHQ.4, with a focus on providing strong cybersecurity governance and monitoring across the civilian CSDP Missions, in particular in the areas of GRC, supporting cybersecurity incidents investigation and coordination, threats assessments and identification, as well as supporting overall cybersecurity awareness initiatives. PLACE and DATE OF EMPLOYMENT EEAS Headquarters, Brussels, Belgium Post available: as from 16/04/2026 LEGAL BASIS The vacancy is to be filled in accordance with the conditions stipulated under the CEOS, in particular Article 82 thereof. In case of recruitment, the successful candidate will be offered a contract agent position (Function group IV), on the basis of a contract with an initial duration of one year that may be successively renewed up to a maximum duration of six years[2], subject to the maximum duration of engagement by the EEAS allowed under successive limited duration contracts of different types[3]. WE LOOK FOR We look for a proactive, autonomous and motivated colleague with at least 4 years' experience in cyber security. Very good communication and organisational skills and a developed sense of service are also required. This position would be ideal for a Cyber Security Officer or an IT Security Specialist who is looking for the next step in his/her career and use their technical background in IT to drive cyber security practices and processes for crisis management entities. The person to be recruited will work under the supervision of the CivOpsHQ.4 Head of Division and the Head of Sector for CIS & Cyber. S/he Is Expected To Perform The Following Duties To oversee cybersecurity processes and procedures across all civilian CSDP Missions and work towards their harmonisation. To determine cybersecurity vulnerabilities and risks by conducting periodic assessments and propose implementing measures or technical guidance. To contribute to the development, implementation and maintenance of the cybersecurity farmwork covering the civilian CSDP Missions, including overseeing the GRC aspects. To provide support in the incident management lifecycle, from detection to investigation and lessons learnt, e.g. via IoC and IoA enrichment, detection rules, coordination of mitigation measures to adopt and follow-up. To draft security plans for the securitisation of business-critical applications. To support Missions in monitoring their infrastructure and that of the CivOpsHQ via the XDR, SIEM solution in use. To participate in the overall team effort of increasing cybersecurity awareness across all Missions and CivOpsHQ staff via the creation of e-learning awareness training, phishing campaigns and live training on cybersecurity threats. Additional Duties To research, evaluate, recommend and introduce new IT security tools, services and technologies to improve and innovate the CivOpsHQ IT Infrastructure in Brussels; To participate, when required, in EU cybersecurity working groups, events and meetings; To dedicate time throughout the year to self-training and upskilling, also via the platform provided in-house. Eligibility criteria[4] Further to the conditions set out in Article 82 of the CEOS, candidates must: have passed a valid EPSO CAST in a valid function group for this post, or be registered in the EPSO Permanent CAST for FG IV ). In the latter case, while the registration will make the candidate eligible for the selection procedure, the recruitment of a candidate on this vacant post will be subject to his/her successfully passing the CAST exam; have completed university studies of at least three years in a relevant technical field attested by a diploma OR a qualification in the National Qualifications Framework which is equivalent to level 6 in the European Qualifications Framework OR a qualification of the second cycle under the framework of qualifications of the European Higher Education Area. The qualification should be in any of the fields of Information Technology, Computer Science, Communications, Engineering or other related field; have the capacity to work in the languages of the CFSP and external relations (English and French) necessary for the performance of their duties; be a national of one of the Member States of the European Union and enjoy full rights as a citizen. Selection criteria Candidates should have at least 4 years of professional experience in a cybersecurity or IT security specialist role. Applicants are expected to have the following experience and skills required for the job: Experience with and/or good knowledge of modern security tools and products, in particular related to Cloud, vulnerability assessments and Cyber Threat Intelligence. Knowledge of AI driven threats and related cybersecurity risks. Knowledge of in Web and Cloud security, including good command of network protocols (TCP/IP, DNS, DHCP, etc.), network architecture, and network device configuration. Hands-on experience analysing event logs, network data (e.g. Netflow, FPC), and other attack artifacts in support of incident investigations. Knowledge of cybersecurity standards and frameworks, e.g. NIST, CIS controls, EBIOS, ISO 27001/27002 and 27005, SOC2, COBIT, etc… Experience with security architectures; Good knowledge of products, services, technologies and commercial actors related to IT/Cyber Security sector and their possible applications in modern public administrations; Strong drafting and analytical skills combined with sound judgement; Ability to communicate clearly on complex issues and the capacity to perform with accuracy and in a flexible manner a diversity of tasks in a complex institutional environment; Strong service and positive team player attitude; Excellent command of English both written and spoken, good knowledge of French would be an advantage Other Advantageous Requirements/skills (considered As Assets) Knowledge of penetration testing practices. Experience of working in a team in multi-disciplinary and multi-cultural environment; Recent/valid professional industry certification(s)e.g. one or more of CISSP, GIAC Certification, CISM, CISA, CRISC; OR a combination of postgraduate certificates and certifications such as CompTIA Security+, CEH Certified Ethical Hacker, etc; Experience working with or within other EU institutions, military counterparts or other Governmental entities; CONDITIONS OF RECRUITMENT AND EMPLOYMENT CONFLICT OF INTEREST AND SECURITY RISKS As a matter of policy, applications by individuals who have dual nationality of which one of a non-EU country, will be considered on a case-by-case basis taking account in particular of the functions attributed to the vacant post. The EEAS also examines if there could be a conflict of interest or security risks. In this context, candidates shall fill in with their application a declaration of potential conflict of interest. MEDICAL CLEARANCE The signature of the contract will be subject to prior favourable opinion of the Medical Service. PERSONNEL SECURITY CLEARANCE (PSC) The requested level of security clearance for this post is: SECRET UE/EU SECRET. A description of the EU classified information levels is available under Article 2 of Annex A of the Decision ADMIN on the security rules of the EEAS[5]. The selected candidate should hold, or be in the position to obtain, a valid Personnel Security Clearance (hereafter, the \"PSC\")[6] issued by the competent authority of the Member State concerned. Candidates who do not already have a valid PSC will be required to go through the security clearance vetting procedure of their Member State to obtain this clearance in accordance with national laws and regulations and with the procedure laid down in the Decision ADMIN on Security Clearance Requirements and Procedures for the EEAS of 08 March 2019 and in Annex A I of the Decision ADMIN on the security rules of the EEAS. Until the PSC is issued by the competent authority of the Member State concerned, the selected candidate will not be authorised to access EUCI at the level of CONFIDENTIEL UE/EU CONFIDENTIAL or above, or to participate in any meetings or workflow where EUCI is processed. Please note that the necessary procedure for obtaining a PSC can be initiated on request of the employer only, and not by the individual candidate. In case of failure to obtain or renew the required PSC, the AACC may take the appropriate measures in accordance with Article 3(3) of the Decision ADMIN on Security Clearance Requirements and Procedures for the EEAS of 08 March 2019. EQUAL OPPORTUNITIES The EEAS strives to be a dynamic, respectful and inclusive Service. We value the talent and professional excellence of our staff, and are committed to building an organisation where gender equality and the respect of diversity are core values, as set out in the EEAS Mission Statement and the EEAS Agenda for Diversity and Inclusion. The EEAS is committed to achieving gender balance within its workforce and strives to avoid any form of discrimination during this selection procedure, as per Article 1(d) of the SR. We actively welcome applications from all qualified candidates without any discrimination based on any ground. We commit to recruit candidates with the highest standard of ability, efficiency and integrity, carrying out a selection based on merits required for the post and from the broadest possible geographical basis among the EU Member States. The EEAS is committed to working with people with disabilities in the terms of the SR. If, by virtue of your medical condition or special needs, you require reasonable accommodation for a part or the entirety of this selection process, please send us an email to CONTRACTAGENTS- Your request will be treated in strict confidence and no record will be kept. If a candidate with a disability is selected for a vacant post, the EEAS is committed to providing reasonable accommodation in accordance with Article 1(d)(4) of the SR. All selected candidates are expected to adhere to the Principles of Professional Behaviour of the EEAS, which outline the need for integrity, transparency, respect, professionalism and accountability, and a zero tolerance approach to any form of harassment APPLICATION AND SELECTION PROCEDURE[7] Please Send Your CV And Cover Letter (with Your EPSO CAST Number), In English Or French, And The Attached Declaration Of Potential Conflict Of Interest Via Email, With Reference To The Vacancy Number In The Subject Field, To CIVOPSHQ- Deadline for sending application: 25/03/2026at 12.00 noon (CET). Candidates shall draft their CV using the Europass CV, which can be found at the following internet address: Late applications will not be accepted. The selection panel will make a pre-selection on the basis of the qualifications and professional experience described in the CV and motivational letter, and will produce a shortlist of eligible candidates who best meet the selection criteria for the post. Please note that only shortlisted candidates will be informed about the outcome of the pre-selection phase. The candidates who have been preselected will be invited for an interview by a selection panel. The selection panel may decide, subsequent to the interview, to organise written tests, either for all pre-selected candidates or to the best ranked ones. The content of such written tests will be defined by the selection panel and may include, but not be limited to, multiple choice questions, open questions and/or topics for a short essay. Pre-selected candidates without a valid CAST shall be invited to sit the CAST exam before or after the interview stage (in accordance with the eligibility criteria above). The panel will then recommend a shortlist of candidates for a final decision by the Authority Authorised to Conclude Contracts of Employment (hereafter, the \"AACC\"). The AACC may decide to interview the candidates on the final shortlist before taking this decision. It is recalled that the selection procedure may be terminated at any stage in the interest of the service. In the interest of the service, after identifying the candidate that best fits the requirements of the post as set out in the vacancy notice, the AACC may also establish a reserve list of candidates. These candidates shall be informed that the reserve list shall remain valid for a period of one year from when it is established and that it may be used to fill the same post or an equivalent post in the EEAS with the same job profile. [1] Staff Regulations of Officials of the European Union (SR) and the Conditions of Employment of Other Servants of the European Union (CEOS). [2] Article 8 of the Commission Decision C of on the general provisions for implementing Article 79(2) of the Conditions of Employment of Other Servants of the European Union, governing the conditions of employment of contract staff employed by the Commission under the terms of Articles 3a and 3b thereof. [3] Decision ADMIN on the maximum duration of engagement by the European External Action Service of non-permanent staff under successive limited duration contracts of different types, and on the minimum lapse of time between successive contracts under Article 2(e) of the CEOS. [4] All the eligibility criteria must be met on the closing date for applications to this post. [5] OJ C 263, 26 July 2023, p.16. [6] The 'Personnel Security Clearance' is defined under point 2 of Annex A I of the Decision ADMIN on the security rules of the EEAS as \"a statement by a competent authority of a Member State which is made following completion of a security investigation conducted by the competent authorities of a Member State and which certifies that an individual may, provided his 'need-to-know' has been determined, be granted access to EUCI up to a specified level (CONFIDENTIEL UE/EU CONFIDENTIAL or above) until a specified date; the individual thus described is said to be 'security cleared'.\" [7] Your personal data will be processed in accordance with Regulation (EU) 2018/1725, as implemented by ADMIN Decision of the High Representative of the Union for Foreign Affairs and Security Policy. The privacy statement is available on the Europa website: ) and on the EEAS ).