Penetration Tester — Web, Infrastructure and Red Team for NATO with security clearance

A multinational defence organisation is adding two penetration testers to itsoffensive security cell. The work is a genuine mix: hands-on testing red and blue team playduring large military exercises and the design reviews that stop a weakness being built in thefirst place.

What you would be doing

• Testing web applications infrastructure and application layers with the tooling andmethodology the job deserves rather than a scanner and a template.
• Leading or joining red and blue team activity during military exercises.
• Reviewing security designs against policy and advising projects before decisions harden.
• Briefing what you found to engineers to boards and to senior officers and writing it upso each audience can act on it.
• Working closely with accreditation and configuration control bodies so findings turn intofixes.

What you would bring

• More than three years of web application and IT infrastructure penetration testing.
• Network security architecture and vulnerability assessment across operating systemssoftware protocols and networks.
• System and network administration on both UNIX and Windows.
• Scripting in at least one of Perl Python Ruby or a shell.
• Authentication and security protocols cryptography application security malware techniquesand the defences against them.
• Report writing you are proud of: executive summary technical findings a remediation plan.

Two positions are open on the same terms on-site near Brussels.