Cyber Defence Platform Engineer (Splunk, Automation) for NATO with security clearance
WLG · Mons, Wallonia, Belgium
Financial Services · 2-10 employees
About the role
You will develop and maintain the Cyber Defence Situational Awareness platform by creating dashboards and integrating new data sources. Additionally, you will provide technical support to operations centre users and act as a bridge between users and the development contractor.
What they look for
Requirements
The role requires hands-on Splunk development experience, including data models, scripting, and automation. Candidates must possess an active security clearance and be comfortable working directly with operational users in an on-site environment.
Full description
Splunk development where the dashboards are used by a cyber operations centre during real incidents.
You will build and maintain the Cyber Defence Situational Awareness platform at a NATO site in Mons, working directly with the operations centre users who depend on it.
What you will be doing
- Developing and maintaining dashboards, visualisations and UI components in Splunk
- Hands-on work on data models, KVStore collections, scheduled searches and macros
- Implementing small to medium enhancements and fixes driven by operational feedback
- Integrating new data sources and tools into the platform
- Writing scripts and automation to improve data processing and platform operations
- Providing day to day technical and operational support to operations centre users
- Acting as the technical bridge between the users and the development contractor
What you will need
- Real Splunk development experience: data models, searches, dashboards, not just querying
- Scripting and automation for data processing
- Experience integrating data sources into a security monitoring platform
- Comfort supporting operational users directly, at their pace rather than a sprint's
Worth knowing before you apply
- Fully on-site in Mons
- It is half engineering and half operational support. If you want pure development with no user contact, this is not it.
Practical detail
- Contract engagement, about 560 hours from late September to the end of December 2026
- An active security clearance is required for this role
Your CV may not be up to date. That is not a problem, send me whatever you have and I will come back to you either way.
