Who we are:

For more than 70 years, NATO’s mission has been to preserve peace and security in the Alliancefor nearly one billion citizens. The NATO Communications and Information Agency (NCIA) and its predecessors have worked tirelessly in providing the means that enable the connectedness and togetherness that keep our Alliance strong. We are the NCIA, a team of 3000 civilian and military staff in 29 locations throughout Europe, North America and Asia.

Our technology and cyber experts allow NATO to conduct critical operations, protect NATO’s airspace, make data-driven decisions, defend against cyber-attacks, secure NATO networks and maintain superiority in space. This is all possible because of our greatest force, our people. In order to keep this edge we aim to hire, train and retain the very best staff.

Our staff members represent both the diversity and unity of our Alliance. When you join the NCIA, you will be part of an organization where you can contribute authentically to the mission and purpose of NATO and help us keep our technological edge.

About the job:

Based in Mons, Belgium, you will join the Agency as we embark on a journey to transform our IT services to support NATO’s Digital Endeavour. You will join NATO Cyber Security Centre (NCSC), which is responsible for planning and executing all lifecycle management activities for cyber security. In executing this responsibility, NCSC provides specialist cyber security-related services covering the spectrum of scientific, technical, acquisition, operations, maintenance, and sustainment support, throughout the lifecycle of NATO Communications and Information Systems (CIS).

The NCSC is part of the nucleus of the NATO Integrated Cyber Defence Centre (NICC).

We are looking for a driven and enthusiastic Red Team Lead who will take on the following roles and responsibilities:

  • Lead and coordinate the Red Team operations with strategic oversight;

  • Coordinate the planning, design, and execution of red team operations that simulate adversarial tactics, techniques and procedures against enterprise systems, covering network, applications and cloud domains;

  • Ensure operational security;

  • Manage engagement scope and rules of engagements;

  • Translate technical findings into clear, actionable recommendations for leadership;

  • Serve as the primary liaison between the Red Team and strategic stakeholders;

  • In collaboration with the Red Team Technical Lead, manage Red Team research and development activities with the goal of developing and utilizing custom tools, scripts, and malware to replicate sophisticated cyber threats and evade detection mechanisms.

For a full list of duties, please review the job description on the NCIA career site.

Note that internally the job title is Principal Cyber Security Assessor.

About you:

The valuable knowledge and experience that you bring to this role are:

  • A Master’s degree at a nationally recognised/certified University in a related discipline and 5 years post-related experience. Or a Bachelor’s degree with 8 years post related experience;

  • Cybersecurity oriented certification such as CRTP, GPEN, GWAPT, OSCP, OSCE, OSEE, GXPN, Red team operator related certification, GREM;

  • At least 5 years practical experience working in offensive cybersecurity field (vulnerability researcher, penetration testing, red teaming);

  • Extensive knowledge and experience (at least 5 years) in the following areas:

üConducting or leading Red Team engagements;

üWeb application penetration testing;

üIT infrastructure penetration testing;

üNetwork security architecture design;

üAssessing security vulnerabilities within OS, software, protocols & networks;

üResearching and evaluating security products & technologies;

üKnowledge in system and network administration of UNIX and Windows systems;

üUse of penetration testing tools, techniques, and recognized testing methodologies;

üScripting skills in at least one of the following: Perl, Python, Ruby, shell (bash, sh).

  • Practical experience in leading Red Team engagements;

  • Strong ability and desire to stay up to date with the latest security technologies and trends;

  • Very good communication and analytical skills;

  • Extensive experience leading interdisciplinary teams, preferably in international environment;

  • Practical experience identifying vulnerabilities and discovering 0days;

  • Understanding of the principles of adversary emulation;

  • Understanding of tactics, techniques and procedures of threat actors based on MITRE ATT&CK Framework;

  • Ability to create and execute custom scripts to simulate attack activities;

  • Understanding of the various types of detections available (defence in depth) and how to bypass them;

  • Ability to create and use custom tools to automate and optimize red team engagements;

  • Experience with security testing tools and methodologies, such as fuzzing, static and dynamic application security testing, and penetration testing;

  • Use of red teaming tools, techniques, and recognized testing methodologies;

  • Technical knowledge in system and network security, authentication and security protocols, cryptography and application security;

  • Proven ability to write clear and structured technical reports including executive summary, technical findings and remediation plan for several different audiences;

  • Fluency in English, both written and spoken.

What we offer:

  • Genuinely meaningful work as part of the most successful alliance in history;

  • 5 year contract with competitive tax-free salary and household and children’s allowances;

  • Privileges for expatriate staff including expatriation and education allowances (where appropriate) and additional home leave;

  • Excellent private health insurance scheme;

  • Generous annual leave of 30 days plus official holidays;

  • NATO Pension Scheme;

  • Development programs such as professional training, wellbeing, and more.

To learn more about NCIA and our work, please visit our website.

The NCIA prides itself on being an equal opportunity employer. We are committed to fostering an inclusive environment of mutual respect and value uniqueness and differences in gender, gender identity, race, ethnic or cultural origin, age, religion, sexual orientation and physical or neurocognitive ability.

Additional details on the conditions of application can be found via the NCIA career site.

At Impactpool we do our best to provide you the most accurate info, but closing dates may be wrong on our site. Please check on the recruiting organization's page for the exact info. Candidates are responsible for complying with deadlines and are encouraged to submit applications well ahead.
Before applying, please make sure that you have read the requirements for the position and that you qualify. Applications from non-qualifying applicants will most likely be discarded by the recruiting manager.