C004912 Penetration Tester (NS) - TUE 27 Oct RELAUNCH

EMW; Den Haag; Hybrid; EUR 90,000 - 120,000; Full time

Job summary

EMW, based in The Hague, seeks an experienced Penetration Tester to lead and participate in NATO exercises, performing web, infrastructure and application testing and delivering security design reviews. The role requires NATO SECRET clearance and strong reporting skills.

The candidate should have 3+ years in web/app/infrastructure pentesting, network security design, vulnerability assessment, and proficiency with testing tools and scripting. UNIX/Windows admin knowledge is beneficial.

Qualifications

• Active NATO SECRET clearance.
• Extensive web application penetration testing experience (3+ years).
• Extensive IT infrastructure penetration testing experience (3+ years).
• Extensive network security architecture design experience (3+ years).
• Experience assessing vulnerabilities in OS, software, protocols & networks (3+ years).
• Experience researching and evaluating security products & technologies (3+ years).
• Knowledge of UNIX and Windows system administration.

Responsibilities

• Lead and/or be part of the Red/Blue Team during NATO military exercises.
• Provide web, infrastructure and application level penetration testing.
• Provide security design reviews to ensure NATO policy compliance.
• Provide security consultancy and advice to projects and plans.
• Build and sustain effective communications with stakeholders including NCIA CCB, Security Accreditation Boards, NATO Authorities, and NCI Agency units.
• Brief executive and technical audiences on security reports and findings and remediation.
• Coordinate with the Head of the Penetration Testing Cell for collaboration with internal/external stakeholders.

Skills

NATO SECRET clearance

Web app pentesting

Infrastructure pentesting

Network security design

Vulnerability assessment

Security products evaluation

UNIX/Windows admin

Pentest tools & methods

Scripting (Perl/Python/Ruby/Shell)

Technical reporting

Stakeholder communication

Job description

Deadline Date:

Tuesday 27 October 2026

Requirement:

Penetration Tester

Location:

The Hague, NL

Full Time On-Site:

Yes

Time On-Site:

100%

Total Scope of the request (hours):

400

Required Start Date:

30 November 2026

End Contract Date:

31 December 2026

Required Security Clearance:

NATO SECRET

Duties & Role:

The duties of the individual mainly focus on:

• Lead and/or be part of the Red/Blue Team during NATO military exercises;
• Provide Web, infrastructure and application level penetration testing;
• Provide security design reviews to ensure compliance with NATO policies and directives;
• Provide security consultancy and advice to projects, plans, and other entities;
• Build and sustain effective communications with different stakeholders; specifically, the NCIA Configuration Control Board, Security Accreditation Boards, NATO Security Accreditation Authorities, and NCI Agency organization units supporting accreditation processes.
• Brief at both executive and technical levels on security reports and testing outcome, including at flag officer level;
• In co-ordination with the Head of the Penetration testing Cell, ensure proactive collaboration and coordination with internal and external stakeholders.

Skill, Knowledge & Experience:

• The candidate must have a currently active NATO SECRET security clearance
• Extensive knowledge and experience (more than 3 years) in web application penetration testing;
• Extensive knowledge and experience (more than 3 years) in IT infrastructure penetration testing;
• Extensive knowledge and experience (more than 3 years) in network security architecture design;
• Extensive knowledge and experience (more than 3 years) in assessing security vulnerabilities within OS, software, protocols & networks;
• Extensive knowledge and experience (more than 3 years) in researching and evaluating security products & technologies;
• Knowledge in system and network administration of UNIX and Windows systems;
• Extensive knowledge and experience (more than 3 years) in the use of penetration testing tools, techniques, and recognized testing methodologies;
• Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);
• Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.
• Ability to evaluate risks and formulate mitigation plans;
• Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences