Senior SIEM & Splunk Security Engineer

NATO Communications and Information Agency (NCIA); Henegouwen; On-site; EUR 68,000 - 82,000; Full time

Benefits offered by this job

Meaningful work

5 year contract with tax-free salary

Expatiation and education allowances

Private health insurance

30 days annual leave

NATO Pension Scheme

Professional development programs

Job summary

The NATO Communications and Information Agency (NCIA) seeks a SIEM Engineer based in Mons, Belgium, to join the NATO Cyber Security Centre (NCSC). You will act as a senior SME for SIEM and log-collection services, shaping security monitoring across enterprise environments and ensuring data security systems operate reliably.

The role requires hands-on Splunk experience, Linux administration, and scripting in Bash, Python or Ansible to automate tasks.

Qualifications

• Bachelor’s degree in a related discipline with 2+ years post-related experience, or 6+ years progressive expertise.
• At least 1 year of extensive SIEM administration in a large enterprise (deployment, configuration, maintenance).
• Hands-on experience with distributed Splunk architectures and Splunk Enterprise.

Responsibilities

• Act as a main engineer and SME for SIEM and log collection services.
• Provide advice and technical assistance, maintain expertise, and contribute to data security projects.
• Responsible for management and further development of data security systems.

Skills

SIEM administrator

Splunk

Linux administration

Python

Bash

Ansible

Regular expressions

Documentation

Autonomy

Communication

English fluency

Education

Bachelor’s degree in a related discipline

Tools

Splunk Enterprise

Ansible

Job description

The NATO Communications and Information Agency (NCIA) seeks a SIEM Engineer based in Mons, Belgium, to join the NATO Cyber Security Centre (NCSC). You will act as a senior SME for SIEM and log-collection services, shaping security monitoring across enterprise environments and ensuring data security systems operate reliably.

The role requires hands-on Splunk experience, Linux administration, and scripting in Bash, Python or Ansible to automate tasks.