Senior Analyst (Russia Cyber Domain/Red Team)

North Atlantic Treaty Organization; Henegouwen; Sur place; EUR 90 000 - 120 000; Plein temps

Résumé du poste

NATO - North Atlantic Treaty Organisation in Belgium invites applications for a Senior Analyst (Russia Cyber Domain/Red Team) to join SHAPE's J2 Division. The role focuses on strategic and operational analysis of the Russian cyber domain and supports red-team activities to test NATO plans and decision-making processes.

You will produce independent assessments of multi-domain threats, contribute to CIP/COP, coordinate red-team work with international partners, and assist in training and

Qualifications

• Minimum of 4 years' related intelligence experience in multi-domain environments.
• Extensive knowledge of the Russian cyber domain and related intelligence activities.
• At least 4 years of liaising with international partners on strategic intelligence cooperation.
• Experience working in cross-functional, multi-domain teams.
• Experience at operational or strategic levels of intelligence.

Responsabilités

• As directed by Red Team leadership, analyse multi-domain, doctrinal and non-doctrinal cyber TTPs and COAs for the Russian domain.
• Contribute to NATO/SHAPE CIP/COP with cyber-domain perspective.
• Lead red team analysis and develop alternative hypotheses for cyber-domain scenarios.
• Collect and exploit classified and unclassified information across PMESII domains to support JIPOE for the Russian cyber domain.
• Lead and coordinate Red Team intelligence support to Training & Exercise preparation, primarily from cyber-domain perspective.
• Support NATO/SHAPE strategic planning and decision-making, including war-gaming and major exercises as opposing forces.

Connaissances

Russian cyber domain analysis

International partner coordination

Cross-functional teamwork

English language

Formation

University degree or equivalent in a related field

Outils

NATO-specific intelligence software

Description du poste

NATO - North Atlantic Treaty Organisation

Job Description - Senior Analyst (Russia Cyber Domain/Red Team) (261497)

Primary Location

NATO Body

Schedule

Full-time

Application Deadline

10-Oct-2026, 9:59:00 PM

Salary (Pay Basis)

Grade NATO Grade G17

Description

Description:

1. Post Context/Post Summary
Supreme Headquarters Allied Powers Europe (SHAPE) is the strategic level command responsible for the planning, preparation, conduct and execution of NATO operations, missions, activities and tasks as directed by Council in order to achieve the strategic objectives of the Alliance.
The Operations Directorate (OPS) is responsible for monitoring the strategic environment and manages current operations for the Supreme Allied Commander Europe (SACEUR). OPS directs and oversees all assigned operational and intelligence functional area activities through the J2 and the J3 divisions, coordinates the contribution of niche forces and capabilities (JTE, NUO, PRM, and ACCI), and tasks MOU organizations (NIFC, JEWCS).
The J2 Division provides comprehensive advice, warning, and situational awareness to the Command Group (CG) and Allied Command Operations (ACO) on Intelligence, Counter-Intelligence, Security, Information Security, Biometrics and Identity Intelligence, Geospatial, Joint Intelligence, Surveillance, Reconnaissance (including ISTAR), Intelligence support to Joint Effects and Targeting, Intelligence Systems, Databases, and Interfaces, as well as Intelligence Support to other disciplines including red teaming.
The J2 Plans Branch is the focal point for all Intelligence related planning, policy and ETEE (Education, Training, Exercise and Evaluation) efforts, including a Red Team element that provides SACEUR and ACO with an independent analytical capability to challenge existing plans IOT enhance and improve SACEURs Decision Making Process (DMP). The Branch consists of two Sections: the Red Team and the J25 Intelligence Plans and Policy.

2. Principal Duties
The incumbent is responsible for the independent, strategic, doctrinal and non-doctrinal analysis and the prediction of possible courses of actions (COAs), regarding the Russian Cyber domain and the identification and development of potential chances for the Alliance.

• As directed by the Red Team Section Head, analysing multi-domain and multidimensional, doctrinal and non-doctrinal, including TTPs and COAs, regarding Russian Cyber domain. Authoritative thinking and opinions from academia, think tanks and strategic studies institutes should be reflected.
• Contribute to NATO/SHAPE common intelligence/operational pictures (CIP/COP) providing expertise from Cyber domain perspective.
• Manage and contribute to the Red Cell analysis and development of alternative hypothesis, including red teaming and alternative analysis techniques concerning Russian Cyber Domain.
• As directed by the Red Team Section Head, collect and exploit classified and unclassified information, in any form and related to political, military, economic, social, infrastructure and information (PMESII) areas, in order to support and contribute to the joint intelligence preparation of the operating environment WRT the Russian Cyber Domain (JIPOE).
• Lead and coordinate the Red Team intelligence support to Training & Exercise preparation and management, primarily from Cyber domain perspective.
• Support and advice to NATO/SHAPE strategic planning process (SPP) and decision-making process (DMP) including war-gaming and major Exercises as opposing forces (OPFOR), primarily from Cyber domain perspective.

3. Special Requirements and Additional Duties
The employee may be required to perform a similar range of duties elsewhere within the organisation at the same grade without there being any change to the contract.

• The incumbent may be required to undertake deployments in support of military operations and exercises, and/or TDY assignments, both within and without NATO boundaries. Such operational deployment may exceed 30 days duration up to 183 days in any period of 547 days and may be on short notice. For NATO International Civilian Staff, acceptance of an employment contract linked to this post constitutes agreement to deploy in excess of 30 days if required.
• Normal Working Conditions apply.

4. Essential Qualifications

a. Professional/Experience

• Minimum of 4 years related experience in multi-domain and multidimensional intelligence collection, processing, exploitation, and dissemination within an international or national organization.
• Extensive knowledge and proven experience on Russian Cyber domain analysis.
• Minimum of 4 years related experience in liaising with international partners on strategic intelligence cooperation and exchange.
• Proven experience working within cross-functional and multi-domain teams.
• Knowledge and/or experience with activities that encompass intelligence at the Operational and/or Strategic level.

b. Education/Training

• University Degree in criminology, police, public or business administration, administration of justice, criminal law, comparative general management, political theory, behavioural or social psychology, computer science, intelligence or related discipline and 4 years post related experience, or Higher Secondary education and completed advanced vocational training in that discipline leading to a professional qualification or professional accreditation with 5 years post related and 2 years function related experience.
• In case of ambiguity the required job specific experience has priority over the standard education and training levels and experience described here.

c. Language

• English - SLP 4343 - (Listening, Speaking, Reading and Writing)

5. Desirable Qualifications

a. Professional Experience

• Multi-domain analytical intelligence experience from an international/joint environment gained from deployment(s) to NATO operation(s) or in a national intelligence agency.
• Experience in several intelligence disciplines.
• Knowledgeable or familiar with the use of NATO-specific intelligence software.
• Experience from liaising with international partners on strategic intelligence cooperation and exchange.
• Proven knowledge on NATO planning, training and exercise procedures.

b. Education/Training

• Intelligence Analyst Course – Critical Thinking and Structured Analysis provided by NATO or others.
• Red Team Training – provided by NATO or others.
• The Near Abroad – The Successor States of the Former Soviet Union provided by NATO or others.

c. Language

• Russian Language – SLP 2222 (or higher)

6. Attributes/Competencies

• Personal Attributes: The incumbent is responsible for analyzing complex problems based on incomplete information from multiple sources and disciplines of intelligence. This requires the application of alternate analysis techniques including, but not limited to, Critical Reviews, Complementary Analysis, Devil’s Advocacy, Deception and Counter‑deception, and Corroboration. It requires excellent language and briefing skills, influencing skills outside of a chain of command, systems thinker with ability to identify second/third order effects, and modify approach based on challenges, adaptability and determination resolve to deliver on projects and designated tasks. Travel will likely be required with this post.
• Professional Contacts: The incumbent works as part of a team of senior military and civilians. The analyst is required to engage with senior staff and formally brief Flag Officers on a regular basis. The analyst will also represent SHAPE with external organizations, making routine engagement with counterparts at NATO HQ, NIFC, ACT and ACO commands.
• Contribution To Objectives: The incumbent will be responsible to maintain a professional and experienced expertise on Cyber domain in support of Red Team needs. The multi‑domain expertise on NATO adversaries is required to contribute to the wider Red Team effort to develop an independent analytical capability to challenge existing ACO plans, operations and intelligence informed by Russian/Terrorist Groups Doctrine/TTPs in order to enhance the DMP through structured and alternative analytical methods.

REMARKS:

Duration of contract: The successful candidate will fill this post as a Project Related NATO International Civilian (PLN) with a 1 year and 1 month definite duration contract within the NATO 2030 Agenda. On expiry of this term the PLN will be deleted or absorbed into the ceiling pending approval or will exceptionally be considered for extension.

The salary will be the basic entry-level monthly salary defined by the NATO Grade of the post, which may be augmented by allowances based on the selected staff member’s eligibility, and which is subject to the withholding of approximately 20% for pension and medical insurance contributions.

NATO is committed to diversity and inclusion, and strives to provide equal access to employment, advancement, and retention, independent of gender, age, nationality, ethnic origin, religion or belief, cultural background, sexual orientation, and disability. NATO welcomes applications of nationals from all member Nations.

Building integrity is a key element of NATO’s core tasks. As an employer, NATO values commitment to the principles of integrity, transparency, and accountability in accordance with international norms and practices established for the defence and related security sector. Selected candidates are expected to be role models of integrity, and to promote good governance through ongoing efforts in their work.

Applicants who prove to be competent for the post but who are not successful in this competition may be offered an appointment in another post of a similar nature, which might become vacant in the near future, albeit at the same or lower grade, provided they meet the necessary requirements.