Senior Technical Lead – Cyber Threat Intelligence (NATO SECRET)

Defianx; Henegouwen; On-site; EUR 120,000 - 180,000; Full time

Job summary

Defianx LLC seeks a Senior Technical Lead for Cyber Threat Intelligence to architect and deliver a NATO SECRET-capable CTI platform. You will oversee integration of MISP with SIEM/EDR and other security tools, guiding secure, scalable deployments in security-sensitive environments.

Requires deep hands-on leadership, enterprise-grade design, and ability to operate in Belgium-based, customer-facing projects with NATO-compliant security controls.

Qualifications

• Bachelor's degree in CS, cybersecurity, engineering or related field.
• 10+ years IT/cybersecurity engineering experience.
• 5+ years in senior technical architecture or solution delivery.
• Experience with enterprise threat intelligence platforms and security operations.
• Strong understanding of MISP architecture and threat intel exchange.
• Experience with SIEM, EDR, security monitoring and automation.
• Proficient in English; able to operate in NATO environments.
• Willingness to travel to Belgium customer sites.

Responsibilities

• Lead the technical architecture, design, and implementation of an enterprise CTI modernization solution.
• Assess existing MISP infrastructure, cybersecurity tools, feeds, and workflows.
• Design secure integration between MISP, SIEM, EDR, IPS, vulnerability management, and hunting platforms.
• Lead technical discovery workshops and translate requirements into solutions.
• Define interfaces, API patterns, data flows, and specifications.
• Establish architecture for NATO UNCLASSIFIED and NATO SECRET environments.
• Guide automated enrichment, correlation, profiling, and information sharing workflows.
• Coordinate engineering teams, testing, accreditation support, and deployment activities.
• Develop implementation plans, test strategies, and technical documentation.
• Serve as senior technical interface with customer engineering teams and cybersecurity stakeholders.
• Ensure smooth transition to operations with training and knowledge transfer.

Skills

CTI architecture

MISP

SIEM & EDR

Security operations

REST APIs

Python

English proficiency

Customer collaboration

Education

Bachelor's degree in Computer Science or related field

Tools

MISP

SIEM platforms

EDR tools

Python

Linux

REST API integration

Job description

Senior Technical Lead – Cyber Threat Intelligence (NATO SECRET)

We are seeking an accomplished Senior Technical Lead to oversee the architecture, integration, and implementation of an advanced Cyber Threat Intelligence (CTI) capability supporting a multinational defense environment.

The successful candidate will lead the technical delivery of a secure, interoperable intelligence platform that improves threat detection, intelligence sharing, operational decision-making, and cybersecurity response.

This position requires a proven technical leader with hands-on experience designing enterprise cybersecurity solutions, integrating intelligence platforms, and delivering complex projects in security-sensitive environments.

Key Responsibilities

Lead the technical architecture, design, and implementation of an enterprise CTI modernization solution.

Assess existing MISP infrastructure, cybersecurity tools, intelligence feeds, and operational workflows.

Design secure integration between MISP, SIEM, EDR, intrusion prevention, vulnerability management, and threat-hunting platforms.

Lead technical discovery workshops and translate operational requirements into implementable solutions.

Define system interfaces, API integration patterns, data flows, and technical specifications.

Establish architecture supporting NATO UNCLASSIFIED and NATO SECRET environments.

Guide the implementation of automated intelligence enrichment, correlation, adversary profiling, and information-sharing workflows.

Coordinate technical engineering teams, integration testing, security accreditation support, and deployment activities.

Develop implementation plans, test strategies, technical documentation, and acceptance evidence.

Serve as the senior technical interface with customer engineering teams and cybersecurity stakeholders.

Ensure successful transition to operational support, including training and knowledge transfer.

Requirements

Required Qualifications

Bachelor's degree in Computer Science, Cybersecurity, Engineering, Information Technology, or equivalent professional experience.

10+ years of relevant IT or cybersecurity engineering experience.

5+ years in senior technical architecture, engineering leadership, or solution delivery.

Demonstrated experience with enterprise threat intelligence platforms and security operations.

Strong understanding of MISP architecture, integrations, and threat intelligence exchange.

Experience with SIEM, EDR, security monitoring, and cybersecurity automation.

Working knowledge of STIX/TAXII, REST APIs, JSON, Python, and Linux environments.

Experience designing secure on-premises or segmented network architectures.

Proven ability to lead complex technical deployments and integration testing.

Strong technical documentation and stakeholder communication skills.

Professional proficiency in English.

Ability to work at customer locations in Belgium.

Security Requirements

Must Active NATO SECRET clearance or a national security clearance acceptable for NATO SECRET access, subject to formal verification.