Penetration Tester
On-site · Mons, Wallonia, Belgium
Job Summary
Penetration Tester role supporting NATO NCIA/NCI Agency programs. Responsibilities include leading or contributing to Red/Blue Team activities during NATO exercises, performing web, infrastructure, and application penetration testing, conducting security design reviews, providing security consultancy to projects, and communicating testing outcomes to stakeholders and executive audiences. Requires knowledge of UNIX and Windows administration, penetration testing tools and methodologies, scripting in languages such as Perl/Python/Ruby/bash, and ability to evaluate risks and produce remediation plans and clear technical reports. Travel to NATO sites with onsite working arrangement in Mons, Belgium; some travel to other NATO sites may be required. Security clearance: Valid National or NATO Secret; onsite work with potential additional travel.
Required Qualifications
- Lead and/or be part of the Red/Blue Team during NATO military exercises
- Provide Web, infrastructure and application level penetration testing
- Provide security design reviews to ensure compliance with NATO policies and directives
- Provide security consultancy and advice to projects, plans, and other entities
- Build and sustain effective communications with stakeholders including NCIA Configuration Control Board and Security Accreditation Authorities
- Brief at executive and technical levels on security reports and testing outcomes
- Coordinate with Head of the Penetration testing Cell for collaboration with internal/external stakeholders
- Web application penetration testing
- IT infrastructure penetration testing
- Network security architecture design
- Assessing security vulnerabilities in OS, software, protocols & networks
- Researching and evaluating security products & technologies
- Knowledge of UNIX and Windows system administration
- Use of penetration testing tools and methodologies
- Scripting in Perl, Python, Ruby, or shell
- Technical knowledge in security, cryptography, malware protection
- Ability to evaluate risks and formulate mitigation plans
- Ability to write clear, structured technical reports with executive summaries and remediation plans
Apply with one swipe on Sorce. We auto-fill applications and apply on your behalf — no cover letters, no 40-minute forms.
Hiring someone like this?
Get your role in front of qualified candidates on Sorce.