Offensive Security Engineer — Exercise Red/Blue Team for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 60 000 - 85 000; Plein temps

Résumé du poste

WLG in Mons, Belgium, is seeking a penetration tester to join a dedicated cell handling both testing and remediation guidance. You will lead or participate in red or blue team exercises, deliver web, infrastructure and application-level testing, and conduct security design reviews for policy compliance.

The role requires more than three years of hands-on testing across web apps and IT infrastructure, strong knowledge of network security, Unix/Windows administration, scripting, and the ability to

Qualifications

• More than three years across web application and IT infrastructure penetration testing.
• Network security architecture design and assessment of vulnerabilities in operating systems, software, protocols and networks.
• System and network administration of both Unix and Windows.
• Penetration testing tools, techniques and recognised methodologies.
• Scripting in at least one of Perl, Python, Ruby or a shell.
• Technical depth in system and network security, authentication protocols, cryptography, application security and malware.
• The ability to evaluate risk and write the mitigation plan, not only the finding.
• Clear, structured technical reports with an executive summary, findings and a remediation plan — for several different audiences.

Responsabilités

• Lead or take part in the red or blue team during military exercises.
• Deliver web, infrastructure and application-level penetration testing.
• Run security design reviews for compliance with the governing policies and directives.
• Advise projects and programmes on security, and say plainly what has to change.
• Build and sustain communication with the accreditation boards and the units supporting them.
• Brief at executive and technical level on findings and testing outcomes, up to flag-officer level.
• Coordinate proactively with internal and external stakeholders alongside the head of the cell.

Connaissances

Web pentesting

IT pentesting

Network security design

System administration

Penetration testing tools

Scripting: Perl/Python/Ruby

Cryptography knowledge

Malware knowledge

Risk assessment

Mitigation planning

Executive reporting

Description du poste

This role sits in a penetration testing cell and covers both halves of the discipline: the testing itself, and the part that decides whether anything gets fixed — reviews, advice and briefings to people who will act on them.

What You Would Be Doing

• Lead or take part in the red or blue team during military exercises.
• Deliver web, infrastructure and application-level penetration testing.
• Run security design reviews for compliance with the governing policies and directives.
• Advise projects and programmes on security, and say plainly what has to change.
• Build and sustain communication with the accreditation boards and the units supporting them.
• Brief at executive and technical level on findings and testing outcomes, up to flag-officer level.
• Coordinate proactively with internal and external stakeholders alongside the head of the cell.

What you would bring

• More than three years across web application and IT infrastructure penetration testing.
• Network security architecture design, and assessment of vulnerabilities in operating systems, software, protocols and networks.
• System and network administration of both Unix and Windows.
• Penetration testing tools, techniques and recognised methodologies.
• Scripting in at least one of Perl, Python, Ruby or a shell.
• Technical depth in system and network security, authentication protocols, cryptography, application security and malware.
• The ability to evaluate risk and write the mitigation plan, not only the finding.
• Clear, structured technical reports with an executive summary, findings and a remediation plan — for several different audiences.

The work is full time on site in Mons, with about ten days of travel within Belgium foreseen.