Cyber Threat Intelligence Researcher - Advanced Threat Analysis

NextLink Group; Brussel Hoofdstad; On-site; EUR 90,000 - 130,000; Full time

Job summary

NextLink Group seeks a Cyber Threat Intelligence Researcher to support NATO’s CTAB within JISD. You will study cyber threat actors, their infrastructure and TTPs, translating findings into actionable intelligence for defence and incident response.

Ideal candidates have MITRE ATT&CK experience, Python scripting skills, and a background in cyber threat research within military or government contexts; NATO SECRET clearance is required.

Qualifications

• Degree in Computer Science, Engineering, Statistics, OR a related quantitative discipline with substantial CS content.
• At least two years of relevant cyber threat intelligence experience or four years with certifications.
• Demonstrable experience researching cyber threat actors, TTPs and infrastructure.
• Experience applying MITRE ATT&CK to threat research and intelligence analysis.
• Experience using Python or other scripting languages for automation and data analysis.
• Valid NATO SECRET security clearance and prior work in military/government environments.

Responsibilities

• Research prioritized cyber threat actors and infrastructure using multiple sources.
• Apply MITRE ATT&CK to classify adversary behaviours and map TTPs.
• Collaborate with CTAB researchers and other intelligence stakeholders.
• Present findings clearly to technical and non-technical audiences.
• Develop network detection signatures and indicators for defensive operations.

Skills

Python scripting

Analytical thinking

Threat intelligence

Collaboration

Problem solving

Education

Bachelor's degree in Computer Science or related quantitative discipline

Tools

MITRE ATT&CK

Job description

NextLink Group seeks a Cyber Threat Intelligence Researcher to support NATO’s CTAB within JISD. You will study cyber threat actors, their infrastructure and TTPs, translating findings into actionable intelligence for defence and incident response.

Ideal candidates have MITRE ATT&CK experience, Python scripting skills, and a background in cyber threat research within military or government contexts; NATO SECRET clearance is required.