Offensive Security Engineer (Exercise Red and Blue Team) for NATO with security clearance

WLG; Eigenbrakel; On-site; EUR 65,000 - 95,000; Full time

Job summary

WLG is seeking a penetration tester to join its offensive security cell in Belgium. The role blends hands-on testing, red/blue team exercises, and design reviews to proactively stop weaknesses.

You will test web apps, infrastructure, and layers, lead or participate in red/blue activities, and translate findings into executive and technical recommendations. Strong reporting and remediation planning are essential.

Qualifications

• Over 3 years of web app and IT infrastructure pentesting experience
• Knowledge of network security architecture and vulnerability assessment
• Experience with UNIX and Windows system administration
• Scripting ability in at least one of Perl, Python, Ruby or shell
• Understanding authentication, security protocols, cryptography and malware defenses
• Proven report writing with executive summaries and remediation plans

Responsibilities

• Test web applications, infrastructure and layers with hands-on methods
• Lead or join red/blue team activities during exercises
• Review security designs against policy and advise before decisions
• Brief engineers and boards with actionable findings and remediation plans
• Coordinate with accreditation and configuration control bodies to implement fixes

Skills

Web app pentesting

IT infrastructure pentesting

UNIX/Windows admin

Scripting (Perl|Python|Ruby|Shell)

Network security & cryptography

Security reporting & remediation

Job description

Find the weakness before anyone else does.A multinational defence organisation is adding a penetration tester to its offensive security cell. The work is a genuine mix: hands-on testing, red and blue team play during large military exercises, and the design reviews that stop a weakness being built in the first place.

What You Would Be Doing

• Testing web applications, infrastructure and application layers, with the tooling and methodology the job deserves rather than a scanner and a template
• Leading or joining red and blue team activity during military exercises
• Reviewing security designs against policy, and advising projects before decisions harden
• Briefing what you found to engineers, boards and senior officers, and writing it up so each audience can act on it
• Working closely with accreditation and configuration control bodies so findings turn into fixes

What you would bring

• More than three years of web application and IT infrastructure penetration testing
• Network security architecture, and vulnerability assessment across operating systems, software, protocols and networks
• System and network administration on both UNIX and Windows
• Scripting in at least one of Perl, Python, Ruby or a shell
• Authentication and security protocols, cryptography, application security, malware techniques and the defences against them
• Report writing you are proud of: executive summary, technical findings, a remediation plan

Why this one is worth a look

Real offensive work against serious targets, with exercises that most testers never get near.