Senior Security Infrastructure Engineer — Deployment and Integration for NATO with security clearance

WLG; Henegouwen; Sur place; EUR 70 000 - 90 000; Plein temps

Résumé du poste

WLG in Belgium is seeking a senior cyber security engineer to stand up boundary protection, detection, monitoring and forensic tooling across environments. You will implement security settings, write installation guides and hardening procedures, and hand over capabilities to operations.

Candidates bring five+ years in cyber security with hands-on experience across Juniper, Palo Alto, Nessus, RSA NetWitness, Splunk and AccessData, plus governance for government/defence deployments and strong

Qualifications

• At least five years in cyber security or a comparably demanding technical field.
• Broad knowledge of security tooling and its configuration, including boundary protection.
• Encryption, IAM, monitoring, detection, incident response, vulnerability assessment, forensics and risk management.
• Hands-on work with Juniper, Palo Alto, web app proxies, RSA NetWitness, Splunk, Nessus and AccessData.
• Infrastructure design within projects – routing, switching and virtualization (VMware).
• Experience delivering systems to government or defence customers, including field deployments.
• Excellent technical writing and professional English, ArchiMate modelling knowledge.

Responsabilités

• Install, configure and test firewalls, routers, switches, proxies and VPN concentrators.
• Install, configure and test vulnerability assessment tooling (Nessus).
• Install, configure and test forensic tooling (AccessData).
• Install, configure and test monitoring and incident response tooling (RSA NetWitness, Splunk).
• Install, configure and test virtualization and SDN technologies.
• Implement and validate security settings across Cisco, Juniper, Linux, Unix and Microsoft environments.
• Assess network performance, security and availability via continuous monitoring.
• Investigate faults and incidents, implementing improvements.
• Run testing, validation and acceptance for deployed capabilities.
• Write installation guides, configuration baselines, test plans/reports, procedures and hardening guides.
• Advise on architecture, tool configuration, system integration and operational improvement.
• Support vulnerability management and incident response (evidence collection, log analysis, reporting).
• Support handover to operations, including knowledge transfer and training.

Connaissances

Security tooling

Technical writing

English proficiency

Archimate modelling

Formation

Degree in related discipline

Outils

Tenable Nessus

AccessData

RSA NetWitness

Splunk

Juniper

Palo Alto

VMware

Description du poste

Plenty of security posts are about advice. This one is about hands on hardware and software: standing up boundary protection, detection, monitoring and forensic tooling, integrating it into existing environments, testing it properly and handing it over to operations in a state someone else can run. The tooling is named rather than hypothetical, and the work runs from configuration baselines through validation and acceptance to the hardening guides and standard operating procedures at the end.

What You Would Be Doing

• Install, configure and test firewalls, routers, switches, proxies and VPN concentrators for security and efficiency.
• Install, configure and test vulnerability assessment tooling, including Tenable Nessus.
• Install, configure and test forensic tooling, including AccessData.
• Install, configure and test monitoring, detection and incident response tooling, including RSA NetWitness and Splunk.
• Install, configure and test virtualisation and software-defined networking technologies.
• Implement and validate security settings across Cisco, Juniper, Linux, Unix and Microsoft environments.
• Assess network performance, security and availability through continuous monitoring and analysis.
• Investigate faults, incidents and performance problems, and implement the improvements.
• Run testing, validation and acceptance for deployed capabilities.
• Write the technical documentation — installation guides, configuration baselines, test plans and reports, procedures, hardening guides.
• Advise on architecture, tool configuration, system integration and operational improvement.
• Support vulnerability management and incident response, including evidence collection, log analysis and reporting.
• Support handover to operations, including knowledge transfer and training.

What you would bring

• At least five years in cyber security or a comparably demanding technical field.
• Broad knowledge of security tooling and its configuration, including boundary protection — firewalls, intrusion prevention on network and host, data diodes.
• Encryption, identity and access management, monitoring and detection, incident response, vulnerability assessment, forensics and risk management.
• Recent hands‑on work with Juniper, Palo Alto, web application proxies, RSA NetWitness, Splunk, Tenable Nessus and AccessData.
• Design and configuration of infrastructure within projects — routing, switching and virtualisation such as VMware.
• A record of delivering systems and capabilities to government or defence customers, including work deployed in the field.
• Excellent technical writing and communication in English at professional level.
• Working proficiency with the ArchiMate modelling language.

A degree in a related discipline with three years of post‑related experience, or about ten years of progressive experience instead. Implementation projects within NATO or a national military organisation are desirable.