Senior DFIR & XDR Tools Engineer - Secure NATO-Scale Ops

spektrum; Henegouwen; On-site; EUR 90,000 - 130,000; Full time

Job summary

Spektrum seeks a skilled professional to own deployment, configuration and ongoing health of digital forensics and XDR tools for NATO-related projects. You will collaborate with investigators and analysts to ensure reliable operations across a high-security environment.

The role requires 5+ years in forensics/XDR deployments, strong scripting (PowerShell/Python) and experience with remote acquisition tooling, Jira, and Confluence.

Qualifications

• Bachelor's degree in a related field plus 3 years of post-related experience, or 10+ years equivalent progression.
• 5+ years deploying/managing forensics and XDR tools in complex environments.
• 2+ years with remote acquisition tooling (Fidelis and/or F-Response), including scaled deployment and resolving performance issues.
• 2+ years with Jira and Confluence.
• Strong understanding of forensically sound acquisition principles.
• Windows Server/Desktop administration (services, drivers, certificates, event logs, permissions, remote management).
• Scripting/automation: PowerShell, Python, Bash, Batch, Ansible.
• Strong written/verbal English (STANAG 6001 Level 3).
• Ability to produce detailed technical documentation and follow change management processes.

Responsibilities

• Deploy, configure, monitor, troubleshoot and maintain digital forensics and XDR tools in line with ITSM processes.
• Translate user feedback into usability/effectiveness improvements, including automation scripts and custom configurations.
• Work onsite at SHAPE, Mons for coordination and access requirements.
• Support change management processes for section tools and capabilities.
• Coordinate and gather information across NCSC, NCIA and NATO/external stakeholders.

Skills

Digital forensics

XDR tools

Remote acquisition tooling

Scripting/automation

English proficiency

Education

Bachelor's degree in a related field

Tools

Fidelis

F-Response

Jira

Confluence

PowerShell

Python

Bash

Batch

Ansible

Job description

Spektrum seeks a skilled professional to own deployment, configuration and ongoing health of digital forensics and XDR tools for NATO-related projects. You will collaborate with investigators and analysts to ensure reliable operations across a high-security environment.

The role requires 5+ years in forensics/XDR deployments, strong scripting (PowerShell/Python) and experience with remote acquisition tooling, Jira, and Confluence.