A multinational defence organisation is adding two penetration testers to its offensive security cell. The work is a genuine mix: hands-on testing, red and blue team play during large military exercises, and the design reviews that stop a weakness being built in the first place.

What you would be doing

• Testing web applications, infrastructure and application layers, with the tooling and methodology the job deserves rather than a scanner and a template.
• Leading or joining red and blue team activity during military exercises.
• Reviewing security designs against policy, and advising projects before decisions harden.
• Briefing what you found — to engineers, to boards, and to senior officers — and writing it up so each audience can act on it.
• Working closely with accreditation and configuration control bodies so findings turn into fixes.

What you would bring

• More than three years of web application and IT infrastructure penetration testing.
• Network security architecture, and vulnerability assessment across operating systems, software, protocols and networks.
• System and network administration on both UNIX and Windows.
• Scripting in at least one of Perl, Python, Ruby or a shell.
• Authentication and security protocols, cryptography, application security, malware techniques and the defences against them.
• Report writing you are proud of: executive summary, technical findings, a remediation plan.

Two positions are open on the same terms, on-site near Brussels.