Vulnerability Assessment Engineer 3

Aegis Vision; Henegouwen; Hybrid; EUR 75,000 - 110,000; Full time

Job summary

Aegis Vision seeks a contracted security auditor to plan and execute on-site CIS Security Audits (Type-3) for networks, systems and applications, with travel to NATO and national facilities. You will analyse data, report findings, and briefing stakeholders to support remediation and mitigation.

The role emphasizes minimal supervision, security protocol adherence, and development of in-house data collection tools, with primary on-site work and limited telework opportunities.

Qualifications

• Extensive knowledge and experience in computer and communications security, enterprise networking, and OS/application vulnerabilities.
• Ability to assess security controls aligned with industry best practices (Zero Trust, Data-Centric Security).
• Expertise in vulnerability assessment scans across large, complex networks without impacting availability.
• Hands-on experience with Nessus products (advanced configuration and customization).
• Experience developing Nessus audit files to enforce compliance checks for OS, network devices and apps.
• Understanding of Active Directory security configuration and vulnerabilities.

Responsibilities

• Plan and execute technical On-site CIS Security Audits (Type-3) for networks, systems, and applications, and ensure the accuracy of the results.
• Analyse collected assessment data and identify security weaknesses.
• Write Security Audit reports with findings and appropriate recommendations.
• Provide briefings and information to support remediation and mitigation.
• Contribute to development of in-house toolset for data collection and analysis.
• Performs other duties as may be required.

Skills

Security auditing

Vulnerability assessment

Zero Trust Architecture

Cloud security

Active Directory security

Azure AD / Entra ID / Office 365

DevSecOps

PowerShell scripting

Python scripting

Tools

Tenable Nessus

Ansible

Job description

• The contracted individual will be asked to support the development of one or more technical deliverables.


• The contracted individual must be able to perform effectively and efficiently with minimal supervision.


• Frequent travel to NATO and national (NATO and non-NATO) facilities is required in support of assessments.


• The duties are normally performed within government or military installations, where security protocols and operational requirements prevail.


• The position is based on-site, with very limited opportunities for teleworking.


• The duties of the individual mainly focus on:


• Plan and execute technical On-site CIS Security Audits (Type-3) for networks, systems, and applications, and ensure the accuracy of the results;


• Analyse collected assessment data and identify security weaknesses;


• Write Security Audit reports with findings and appropriate recommendations;


• Provide briefings and further information to support remediation and mitigation;


• Contribute to development of in-house toolset for data collection and analysis;


• Performs other duties as may be required.

Skill, Knowledge & Experience:

• The required skillset for the contracted individual is extensive knowledge and experience (more than 3 years – except AI) in the following areas:


• Proven, in depth understanding of computer and communications security, enterprise networking, and the vulnerabilities inherent in modern operating systems and applications;


• Ability to assess a variety of security controls aligned with industry best practices, including Zero Trust Architecture and Data Centric Security principles;


• Expert knowledge in executing vulnerability assessment scans across large, complex networks without impacting system availability or performance;


• Demonstrable hands on experience with Tenable Nessus products, including advanced configuration and customization;


• Extensive proficiency in developing and deploying Nessus audit files to enforce compliance checks for operating systems, network devices, and applications;


• Thorough understanding of Active Directory security configuration and associated vulnerabilities;


• Advanced knowledge of Microsoft Azure AD / Entra ID / Office 365 and AWS Cloud Security, with practical experience in securing hybrid and cloud environments;


• Familiarity with DevSecOps practices, embedding security into CI/CD pipelines and cloud native deployments;


• Comprehensive experience in assessing and implementing system hardening measures, antimalware configurations, and endpoint protection strategies;


• Ability to benchmark systems against recognized security standards (e.g., CIS Benchmarks, NIST);


• Applied expertise in Artificial Intelligence, including the capability to assess Large Language Models (LLMs);


• Proficiency in implementing and securing Ansible deployments;


• Expertise with Software Defined Networking (SDN) and Service Oriented Architecture (SOA) implementations;


• Capability to integrate modern architectures with enterprise security frameworks;


• Enhanced skillset in data processing automation using scripting languages (e.g. PowerShell, Python, Bash);


• Ability to build repeatable workflows/checklists to improve efficiency and reduce human error;


• Excellent communication skills, including briefing senior stakeholders, delivering clear presentations, producing high quality reports, and mediating technical discussions;


• Strong interpersonal abilities with a proven track record of working independently and collaboratively within multidisciplinary teams;