Penetration Tester — Web, Infrastructure and Red Team for NATO with security clearance

WLG; Eigenbrakel; Sur place; EUR 70 000 - 110 000; Plein temps

Résumé du poste

WLG, a multinational defence organisation, is expanding its offensive security team with two penetration testers. The role blends hands-on testing, red and blue team exercises during large military drills, and design reviews that prevent weaknesses from being built.

You will perform web app and infrastructure pentesting, work on security designs, and report findings to engineers, boards, and senior officers, ensuring fixes are traceable and actionable.

Qualifications

• More than three years of web application and IT infrastructure penetration testing.
• Knowledge of network security architecture and vulnerability assessment across OS, software, protocols and networks.
• Experience with UNIX and Windows administration.
• Scripting skills in Perl, Python, Ruby or a shell.
• Familiarity with authentication, security protocols, cryptography, malware techniques and defenses.
• Strong report writing: executive summaries, technical findings, remediation plans.

Responsabilités

• Testing web applications, infrastructure and application layers with advanced tooling and methodologies.
• Leading or joining red and blue team activities during exercises.
• Reviewing security designs against policy and advising projects before decisions tighten security.
• Briefing findings to engineers, boards and senior officers with actionable writeups.
• Coordinating with accreditation and configuration control bodies to turn findings into fixes.

Connaissances

Web app pentesting

IT infrastructure pentesting

Network security architecture

Vulnerability assessment

UNIX administration

Windows administration

Scripting (Perl, Python, Ruby, shell)

Security protocols & cryptography

Report writing

Description du poste

A multinational defence organisation is adding two penetration testers to its offensive security cell. The work is a genuine mix: hands-on testing, red and blue team play during large military exercises, and the design reviews that stop a weakness being built in the first place.

What You Would Be Doing

• Testing web applications, infrastructure and application layers, with the tooling and methodology the job deserves rather than a scanner and a template.
• Leading or joining red and blue team activity during military exercises.
• Reviewing security designs against policy, and advising projects before decisions harden.
• Briefing what you found — to engineers, to boards, and to senior officers — and writing it up so each audience can act on it.
• Working closely with accreditation and configuration control bodies so findings turn into fixes.

What you would bring

• More than three years of web application and IT infrastructure penetration testing.
• Network security architecture, and vulnerability assessment across operating systems, software, protocols and networks.
• System and network administration on both UNIX and Windows.
• Scripting in at least one of Perl, Python, Ruby or a shell.
• Authentication and security protocols, cryptography, application security, malware techniques and the defences against them.
• Report writing you are proud of: executive summary, technical findings, a remediation plan.

Two positions are open on the same terms, on-site near Brussels.