MISP Engineer (Threat Intelligence Platform Testing) for NATO with security clearance

An intelligence-sharing platform is only worth what its last releasedoes.

You would run quality assurance for a multinational defence organisations deployment of anopen-source threat-intelligence sharing platform and the integrations around it in Mons Belgium working with the service delivery and engineering managers system administrators developersand data engineers and with the open-source community itself.

What you would be doing

• Configuring and managing dedicated platform instances and the infrastructure they test onwith support from the system administration side
• Occasional basic operations on the production instances
• Appraising work against the organisations standards identifying where it does not complyand working out why
• Preparing and reporting on findings and the risks behind them
• Planning and managing the testing: specifying the environment creating the cases andscenarios and making sure they reflect realistic operating conditions and real coverage
• Documenting analysing and reporting results so that something actually gets done aboutthem
• Occasional support to the user community on the managed production instances
• Coordinating test activity with external parties including the core project team and othercommunity members

What you would bring

• At least five years of developing and executing software test strategies
• Test automation and API testing
• Python scripting
• Basic Linux Apache and MySQL or MariaDB operations
• Configuring web applications
• A good grasp of security principles practice and technology
• The ability to work alone and in a team including supporting the people around you
• Excellent organisation communication and analysis and professional English
• A bachelors degree in a related discipline with three years of related experience orexceptionally ten years of progressive expertise in this work

Nice to have

• ISTQB or a similar testing certification
• Running a threat-sharing instance as an administrator or writing code for one in Python orPHP
• Incident response experience and work with open-source communities
• Multinational cyber exercises and Red Hat

Why this one is worth a look

It sits where testing security and open source meet you would be working with the upstreamproject not just consuming it.