Security Design Reviewer and Penetration Tester for NATO with security clearance

Wlgroup; Eigenbrakel; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Wlgroup in Belgium near Brussels is seeking two penetration testers for its offensive security cell. The role blends hands-on testing, red/blue team participation in large military exercises, and design reviews to prevent weaknesses.

You will test web apps, infrastructure, and layers with robust tooling, report findings to engineers and officers, and work with accreditors to turn findings into fixes. Two positions open on-site near Brussels.

Qualifications

• 3+ years in web app and IT infrastructure pentesting.
• Ability to assess networks, OSes, protocols and vulnerabilities.
• Experience with UNIX and Windows administration.
• Scripting in Perl, Python, Ruby or shell.
• Knowledge of authentication, cryptography and malware defenses.
• Strong report writing with executive summaries and remediation plans.

Responsabilités

• Perform hands-on testing of web apps, infrastructure, and layers.
• Lead or join red/blue team activities during exercises.
• Review designs against policy and advise projects.
• Brief findings to engineers, boards, and senior officers and document them.
• Collaborate with accreditation and configuration teams to fix findings.

Connaissances

Web pentesting

IT infra pentesting

Network security

UNIX administration

Windows administration

Scripting languages

Security protocols

Cryptography basics

Professional writing

Description du poste

A multinational defence organisation is adding two penetration testers to its offensive security cell. The work is a genuine mix: hands-on testing, red and blue team play during large military exercises, and the design reviews that stop a weakness being built in the first place.

What you would be doing

• Testing web applications, infrastructure and application layers, with the tooling and methodology the job deserves rather than a scanner and a template.
• Leading or joining red and blue team activity during military exercises.
• Reviewing security designs against policy, and advising projects before decisions harden.
• Briefing what you found — to engineers, to boards, and to senior officers — and writing it up so each audience can act on it.
• Working closely with accreditation and configuration control bodies so findings turn into fixes.

What you would bring

• More than three years of web application and IT infrastructure penetration testing.
• Network security architecture, and vulnerability assessment across operating systems, software, protocols and networks.
• System and network administration on both UNIX and Windows.
• Scripting in at least one of Perl, Python, Ruby or a shell.
• Authentication and security protocols, cryptography, application security, malware techniques and the defences against them.
• Report writing you are proud of: executive summary, technical findings, a remediation plan.

Two positions are open on the same terms, on-site near Brussels.