C004912 Penetration Tester (NS) - TUE 27 Oct RELAUNCH

Arbeitnow; Den Haag; Presencial; EUR 90 000 - 120 000; Tempo integral

Resumo da oferta

NATO is seeking a Penetration Tester to perform hands-on security testing and advisory duties in a fully on-site role in The Hague. The candidate will lead or contribute to Red/Blue Team exercises, conduct web, infrastructure and application pentesting, and provide security design reviews to ensure compliance with NATO directives.

The role requires NATO SECRET clearance, 3+ years in multiple pentesting domains, and strong reporting skills to communicate findings to technical and executive

Qualificações

• Active NATO SECRET clearance required.
• 3+ years in web application pentesting.
• 3+ years in IT infrastructure pentesting.
• 3+ years in network security architecture design.
• 3+ years in assessing vulnerabilities in OS, software, protocols & networks.
• 3+ years in researching and evaluating security products & technologies.
• Unix and Windows system administration knowledge.
• 3+ years using pentest tools, techniques and methodologies.
• Scripting skills in Perl, Python, Ruby or Bash.
• Knowledge of security protocols, cryptography and malware protection.

Responsabilidades

• Lead and/or participate in Red/Blue Team during NATO exercises.
• Perform web, infrastructure and application level penetration testing.
• Conduct security design reviews to ensure NATO policy compliance.
• Provide security consultancy and advisory to projects and plans.
• Communicate security findings to stakeholders including NCIA boards and NATO authorities.
• Brief executives and technical staff on reports and outcomes; tailor messaging by audience.
• Collaborate with Head of Penetration Testing Cell to coordinate with internal and external stakeholders.

Conhecimentos

Web app pentesting

IT infrastructure pentesting

Network security design

Vulnerability assessment

Pentest tooling

Security reporting

Scripting (Python, Perl, Ruby, Bash)

Risk assessment

Security product research

Unix/Windows admin

Descrição da oferta de emprego

NOTE: Please do not resubmit candidates who were found non-compliant in the earlier rounds of this RFQ.

Previously proposed candidates were non-compliant for the following reason:

• The profiles do not demonstrate clear, independently verifiable experience aligning with the minimum requirement of 3 years in hands-on penetration testing.

Deadline Date: Tuesday 27 October 2026

Requirement: Penetration Tester

Location: The Hague, NL

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 400

Required Start Date: 30 November 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Duties & Role:

The duties of the individual mainly focus on:

• Lead and/or be part of the Red/Blue Team during NATO military exercises;
• Provide Web, infrastructure and application level penetration testing;
• Provide security design reviews to ensure compliance with NATO policies and directives;
• Provide security consultancy and advice to projects, plans, and other entities;
• Build and sustain effective communications with different stakeholders; specifically, the NCIA Configuration Control Board, Security Accreditation Boards, NATO Security Accreditation Authorities, and NCI Agency organization units supporting accreditation processes.
• Brief at both executive and technical levels on security reports and testing outcome, including at flag officer level;
• In co-ordination with the Head of the Penetration testing Cell, ensure proactive collaboration and coordination with internal and external stakeholders.

Requirements

Skill, Knowledge & Experience:

• The candidate must have a currently active NATO SECRET security clearance
• Extensive knowledge and experience (more than 3 years) in web application penetration testing;
• Extensive knowledge and experience (more than 3 years) in IT infrastructure penetration testing;
• Extensive knowledge and experience (more than 3 years) in network security architecture design;
• Extensive knowledge and experience (more than 3 years) in assessing security vulnerabilities within OS, software, protocols & networks;
• Extensive knowledge and experience (more than 3 years) in researching and evaluating security products & technologies;
• Knowledge in system and network administration of UNIX and Windows systems;
• Extensive knowledge and experience (more than 3 years) in the use of penetration testing tools, techniques, and recognized testing methodologies;
• Scripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, ksh, csh);
• Technical knowledge in system and network security, authentication and security protocols, cryptography, application security, as well as, malware infection techniques and protection technologies.
• Ability to evaluate risks and formulate mitigation plans;
• Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences