Hybrid Cyber Threat Intelligence Researcher (Brussels)

NPAworldwide; Brussel Hoofdstad; Hybrid; EUR 108,000 - 154,000; Full time

Benefits offered by this job

Hybrid working arrangement

Job summary

NATO is seeking a Cyber Threat Intelligence Researcher to support the Cyber Threat Analysis Branch (CTAB) in Brussels. The role focuses on researching threat actors’ tactics, techniques and procedures to deliver technical, actionable threat intelligence for the Alliance.

The position offers a hybrid work model (approximately 2 days onsite in Brussels and 3 days remote) with an hourly compensation of €95. This long-term contract for 2027 requires NATO SECRET clearance and in-country eligibility

Qualifications

• Active NATO SECRET security clearance.
• Degree in a quantitative discipline with substantial CS content and 2 years of relevant experience; or 4 years experience with certifications.
• Experience analysing cyber threat actors and TTPs to produce actionable threat intelligence.
• Knowledge of the intelligence lifecycle and MITRE ATT&CK framework.
• Strong written and verbal communication; ability to explain complex topics to non-technical audiences.

Responsibilities

• Create scripts and queries to track threat actor infrastructure using commercial and OSINT tools.
• Write technical threat intelligence products, including detection signatures for network defenders.
• Translate technical threat intelligence into operational and strategic intelligence for NATO decision-makers.

Skills

Threat intelligence analysis

MITRE ATT&CK

Python

Communication skills

Cybersecurity fundamentals

Threat hunting

Reverse engineering

Education

Bachelor's degree in CS/Engineering/Statistics/Operations Research

4+ years relevant experience or industry certifications

Job description

NATO is seeking a Cyber Threat Intelligence Researcher to support the Cyber Threat Analysis Branch (CTAB) in Brussels. The role focuses on researching threat actors’ tactics, techniques and procedures to deliver technical, actionable threat intelligence for the Alliance.

The position offers a hybrid work model (approximately 2 days onsite in Brussels and 3 days remote) with an hourly compensation of €95. This long-term contract for 2027 requires NATO SECRET clearance and in-country eligibility