Security Consultant (Penetration Testing and Accreditation Support) for NATO with security clearance

WLG; Den Haag; On-site; EUR 70,000 - 110,000; Full time

Job summary

WLG in The Hague, Netherlands, is seeking a penetration tester to join its testing cell: lead or join red and blue teams during multinational exercises and testing the systems the rest of the year. On-site in The Hague with around ten days of travel foreseen.

You will perform web, infrastructure and application-level penetration testing, security reviews, and provide consultancy to projects while coordinating with accreditation boards and senior officers.

Qualifications

• More than three years hands-on depth across web app and IT infrastructure penetration testing.
• Assessing vulnerabilities in operating systems, software, protocols and networks.
• Scripting in at least one of Perl, Python, Ruby or shell.

Responsibilities

• Lead or form part of the red and blue teams during multinational exercises.
• Web, infrastructure and application-level penetration testing.
• Security design reviews against organisational policy and directives.
• Security consultancy and advice to projects and plans.
• Working with configuration control boards, accreditation boards and national authorities.
• Briefing at technical and executive level on findings and remediation.

Skills

Penetration testing

Red/Blue team leadership

Security architecture design

Scripting

Risk assessment & mitigation

Technical writing

Security testing methodologies

Job description

You would spend the year finding what an adversary would find first.A multinational defence organisation is looking for a penetration tester to work inside its testing cell: leading or joining red and blue teams during military exercises, and testing the systems the rest of the year. On-site in The Hague, Netherlands, with around ten days of travel foreseen.

What You Will Be Doing

• Leading, or forming part of, the red and blue teams during large multinational exercises
• Web, infrastructure and application-level penetration testing
• Security design reviews, checking compliance against organisational policy and directives
• Security consultancy and advice to projects, plans and other parts of the organisation
• Working with configuration control boards, accreditation boards and the national accreditation authorities that sign systems off
• Briefing at both technical and executive level — including the most senior officers — on findings and remediation

What you will need

• More than three years of hands‑on depth across web application and IT infrastructure penetration testing, and network security architecture design
• Assessing vulnerabilities in operating systems, software, protocols and networks, and evaluating security products and technologies
• System and network administration on both UNIX and Windows
• Recognised testing methodologies and the tooling that goes with them
• Scripting in at least one of Perl, Python, Ruby or shell
• Real technical knowledge of authentication and security protocols, cryptography, application security, malware infection techniques and the protections against them
• The ability to evaluate risk and write a mitigation plan, not just a finding
• Clear, structured technical writing — executive summary, technical detail and remediation, for audiences that read very differently

Why this one is worth a look

The exercises are real, the scope is broad, and your reports get read at the top of the organisation. Few penetration testing roles combine that reach with this much technical freedom.