Penetration Tester — Web, Infrastructure and Red Team for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 65 000 - 90 000; Plein temps

Résumé du poste

WLG in Mons, Belgium, is seeking an experienced penetration tester to join a dedicated cell combining testing and remediation guidance. The role covers web, infrastructure and application testing, security design reviews, and direct briefings to implement changes.

You will lead or support red or blue team exercises during military exercises, advise on security improvements, and communicate findings to executives and technical teams, ensuring remediation plans are actionable and clear.

Qualifications

• Minimum 3+ years in web app and IT infrastructure penetration testing.
• Experience in network security architecture design and vulnerability assessment.
• Proficient in Unix and Windows system administration.
• Ability to evaluate risk and write mitigation plans.

Responsabilités

• Lead or participate in red or blue team exercises during military deployments.
• Deliver web, infrastructure and application-level penetration testing.
• Conduct security design reviews for policy and directive compliance.
• Advise projects on security changes and communicate findings clearly.
• Build ongoing communication with accreditation boards and supporting units.
• Brief executive and technical audiences on findings and outcomes.
• Coordinate with internal and external stakeholders alongside the head of the cell.

Connaissances

Penetration testing

Red/Blue team

Executive briefings

Security reporting

Risk assessment

Unix/Windows administration

Scripting: Perl/Python/Ruby

Outils

Penetration testing tools

Description du poste

This role sits in a penetration testing cell and covers both halves of the discipline: the testing itself, and the part that decides whether anything gets fixed — reviews, advice and briefings to people who will act on them.

What You Would Be Doing

• Lead or take part in the red or blue team during military exercises.
• Deliver web, infrastructure and application-level penetration testing.
• Run security design reviews for compliance with the governing policies and directives.
• Advise projects and programmes on security, and say plainly what has to change.
• Build and sustain communication with the accreditation boards and the units supporting them.
• Brief at executive and technical level on findings and testing outcomes, up to flag-officer level.
• Coordinate proactively with internal and external stakeholders alongside the head of the cell.

What you would bring

• More than three years across web application and IT infrastructure penetration testing.
• Network security architecture design, and assessment of vulnerabilities in operating systems, software, protocols and networks.
• System and network administration of both Unix and Windows.
• Penetration testing tools, techniques and recognised methodologies.
• Scripting in at least one of Perl, Python, Ruby or a shell.
• Technical depth in system and network security, authentication protocols, cryptography, application security and malware.
• The ability to evaluate risk and write the mitigation plan, not only the finding.
• Clear, structured technical reports with an executive summary, findings and a remediation plan — for several different audiences.

The work is full time on site in Mons, with about ten days of travel within Belgium foreseen.