Cyber Security Software Engineer
On-siteMons, Wallonia, Belgium
Job Summary
Develop and maintain CDSA dashboards, visualizations, and user interface components in Splunk while designing data models, KVStore collections, and scheduled searches. Integrate new data sources and security tools, develop automation scripts for data processing, and provide day-to-day technical support to Cyber Operations Centre users. Act as the technical liaison between users and external development partners, validate updates before production deployment, and gather user feedback to prioritize technical tasks. Monitor dashboard performance and platform health, contribute to the technical roadmap, and support Early Life Support activities for new releases. This role requires a NATO Secret security clearance and is based in Mons, Belgium, with occasional travel to other NCIA locations.
Required Qualifications
- Minimum 3 years of hands-on experience with Splunk, including: Dashboard development, Data models, KVStore, Scheduled searches, Macros
- Experience developing Splunk user interfaces and visualizations
- Experience with scripting languages such as Python, Bash, or similar
- Experience working with REST APIs
- Experience interacting with databases
- Good understanding of cybersecurity concepts, including: Vulnerability Management, Threat Intelligence, Incident Management
- Strong analytical and problem-solving skills
- Excellent communication skills with the ability to explain technical concepts to operational users
- Ability to balance operational support with software development responsibilities
- Professional English proficiency equivalent to NATO STANAG 6001 Level 3
- At least 3 years of practical experience in Splunk development and administration
- Experience in software scripting and automation
- Experience with API integrations and database connectivity
- Experience supporting cybersecurity platforms or security operations
- Bachelor's degree in Computer Science, Cyber Security, Information Technology, Software Engineering, or a related discipline
- A minimum of 10 years of progressive professional experience in relevant cybersecurity or software engineering roles
- NATO Secret Security Clearance is required
- Valid NATO Secret security clearance
- Full-time, primarily on-site
- Remote work of up to 20% may be permitted with prior approval and subject to NCIA policies
- Standard office working environment
- NCIA IT equipment will be provided for processing restricted information
- Contractors working remotely must provide suitable IT equipment for public and unclassified work and Microsoft Teams collaboration
- Occasional travel to other NCIA locations may be required
- Travel is typically up to 2 days per trip, with a maximum frequency of twice per month
- Some travel to other NATO sites may be required
Desired Qualifications
- Experience with CDSA or similar large-scale Splunk platforms
- Experience with data integration technologies such as REST APIs, DB Connect, and Cribl
- Knowledge of MITRE ATT&CK Framework and vulnerability scoring methodologies
- Experience with Machine Learning and Artificial Intelligence
- Previous experience working in NATO, military, defence, or other high-security environments
- Splunk Enterprise Certification
- Machine Learning and/or Artificial Intelligence Certification
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.