• Lead or participate in Red Team and Blue Team activities during NATO military exercises.
• Conduct penetration testing of web applications, IT infrastructure, and applications.
• Perform security design reviews to ensure compliance with NATO policies and directives.
• Provide security consultancy and recommendations to projects and stakeholders.
• Identify and assess security vulnerabilities in operating systems, software, networks, and protocols.
• Evaluate security risks and formulate mitigation plans.
• Research and evaluate security products and technologies.
• Prepare structured penetration testing reports, including executive summaries, technical findings, and remediation plans.
• Present security assessment results to technical teams, executives, and senior military leadership, including flag officers.
• Collaborate with the NCIA Configuration Control Board, Security Accreditation Boards, and NATO Security Accreditation Authorities.
• Coordinate activities with the Head of the Penetration Testing Cell and internal and external stakeholders.

• Strong experience in web application penetration testing.
• Proficiency in IT infrastructure penetration testing.
• Knowledge of network security architecture and design.
• Experience in vulnerability assessment across operating systems, software, protocols, and networks.
• Familiarity with penetration testing tools, techniques, and recognized testing methodologies.
• UNIX and Windows system and network administration skills.
• Scripting skills in at least one of the following: Python, Perl, Ruby, Shell scripting (Bash, Ksh, or Csh).
• Understanding of system and network security, authentication and security protocols, cryptography, and application security.
• Knowledge of malware infection techniques and protection technologies.
• Experience in security product and technology evaluation.
• Ability to conduct risk assessment and mitigation planning.
• Clear technical report writing skills for both executive and technical audiences.
• Strong stakeholder communication skills.

• Over 3 years of extensive knowledge and experience in penetration testing, network security architecture, vulnerability assessment, and related security technologies.
• Responsibilities include leading or participating in NATO exercise activities and communicating findings to senior stakeholders.

Braine-l'Alleud, Belgium, with a planned future relocation to Brussels, Belgium, following the move of the NATO Cyber Security Centre (NCSC).

• Full-time on-site.
• Start date: 23 November 2026.
• End date: 31 December 2026.
• Total scope: 400 hours.
• Working conditions: Normal office environment.
• Travel: 10 days within Belgium are foreseen.
• Security clearance: NATO Secret – mandatory.

Some travel to other NATO sites may be required.

Valid National or NATO Secret personal security clearance is mandatory.