Security Analyst — Vulnerability Data and Dashboards for NATO with security clearance
WLG Mons, Wallonia, Belgium
Financial Services · 2-10 employees
Applying here? Try the free cover letter tool — paste this posting and your résumé, no account needed.
About the role
The analyst will interpret weekly vulnerability scan results to create remediation plans and coordinate with system owners to ensure security gaps are closed. Additionally, they will build and maintain automated data pipelines and dashboards to track security metrics and operational reporting.
What they look for
Requirements
Candidates must have substantial experience in vulnerability management and practical familiarity with security scanning tools like Nessus or Qualys. Strong technical proficiency in SQL, data modeling, and scripting languages such as Python or PowerShell is required to manage and visualize large security datasets.
Full description
Most organisations can scan. Far fewer can say what the scans mean, who owns each finding and whether anything was fixed. A multinational defence organisation is looking for the analyst who closes that gap — half security assessment, half data engineering, and the coordination that turns a report into a repaired system.
What you would be doing
- Reading the weekly assessment results, interpreting the technical findings, and writing the
remediation plan that goes to the right technical owner.
- Judging technical impact so that remediation is prioritised on risk rather than on volume,
and advising on hardening at operating system, database and network level.
- Building and running the data side: a structured repository that aggregates raw scan output
from several sources, and the pipeline that ingests it without manual handling.
- Designing and maintaining live dashboards in Power BI or Grafana, and the metrics that make
operational and management reporting meaningful.
- Acting as the technical contact for site administrators and system owners, and keeping the
remediation tracking honest and current.
- Producing the weekly and monthly reporting, and chairing the coordination meetings where
roadblocks get cleared.
- Leaving behind documentation good enough that the platform can be maintained without
you.
What you would bring
- Substantial vulnerability management experience, current rather than historical, plus a
track record of validating that delivered work meets its security requirements.
- Practical familiarity with scanners and their output formats — Nessus, Qualys, OpenVAS.
- A working grounding in security architecture: boundary protection, encryption, identity and
access, monitoring and detection, incident response and risk.
- Real SQL depth for modelling and querying large scan datasets, in PostgreSQL or SQL
Server.
- Advanced Power BI, including data modelling and DAX, or the Grafana equivalent against SQL
and time-series sources.
- Python with Pandas or NumPy, or PowerShell, for parsing scan output and removing manual
steps.
- Ownership: the motivation to carry a task to its end, alone or in a team, and the writing to
show for it.
- Nice to have: certifications such as CISSP, CISM or a GIAC, and a data or business
intelligence certification such as PL-300.
Extensions are offered where the work goes well. Applications are reviewed as they arrive.
