Offensive Security Engineer (Exercise Red and Blue Team) for NATO with security clearance
WLG Braine-l'Alleud, Wallonia, Belgium
Financial Services · 2-10 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
Conduct hands-on penetration testing of web applications and infrastructure while leading red and blue team activities during military exercises. Provide security design reviews and communicate findings effectively to engineers, boards, and senior officers.
What they look for
Requirements
Requires over three years of experience in web application and IT infrastructure penetration testing. Candidates must possess strong skills in network architecture, system administration, scripting, and technical report writing.
Full description
Find the weakness before anyone else does.
A multinational defence organisation is adding a penetration tester to its offensive securitycell. The work is a genuine mix: hands-on testing, red and blue team play during large militaryexercises, and the design reviews that stop a weakness being built in the first place.
What you would be doing
- Testing web applications, infrastructure and application layers, with the tooling andmethodology the job deserves rather than a scanner and a template
- Leading or joining red and blue team activity during military exercises
- Reviewing security designs against policy, and advising projects before decisions harden
- Briefing what you found to engineers, boards and senior officers, and writing it up so eachaudience can act on it
- Working closely with accreditation and configuration control bodies so findings turn into fixes
What you would bring
- More than three years of web application and IT infrastructure penetration testing
- Network security architecture, and vulnerability assessment across operating systems,software, protocols and networks
- System and network administration on both UNIX and Windows
- Scripting in at least one of Perl, Python, Ruby or a shell
- Authentication and security protocols, cryptography, application security, malware techniquesand the defences against them
- Report writing you are proud of: executive summary, technical findings, a remediation plan
Why this one is worth a look
Real offensive work against serious targets, with exercises that most testers never get near.
Similar roles
-
Cybersecurity Advisory Consultant
Bitdefender Romania
-
Copy of Спеціаліст з інформаційної безпеки / Cybersecurity specialist
Leroy Merlin Ukraine Kyiv, Ukraine
-
CyberSecurity Analyst (Application Security)
FPT Asia Pacific Pte Ltd Singapore, Singapore
-
[LPS] Cybersecurity Consultant
Lenovo Hong Kong, Hong Kong Island, Hong Kong S.A.R.
-
Internal Audit – Foundation Engineering / Tech Risk and Cybersecurity, Associate, Singapore
Goldman Sachs Singapore
-
Senior Security Engineer (Splunk)
NCS Singapore, Singapore