Red Team Lead

Job Posting Organization:
The NATO Communications and Information Agency (NCIA) has been operational for over 70 years, dedicated to preserving peace and security" style="border-bottom: 1px dotted #007bff !important;">security for nearly one billion citizens across the Alliance. With a workforce of approximately 3000 civilian and military staff, the NCIA operates in 29 locations across Europe, North America, and Asia. The agency focuses on providing advanced technology and cyber expertise to support NATO's critical operations, ensuring the protection of airspace, data-driven decision-making, and defense against cyber threats. The NCIA is committed to hiring, training, and retaining top talent to maintain NATO's technological edge, fostering a diverse and unified workforce that contributes to the organization's mission.

Job Overview:
As a Red Team Lead based in Mons, Belgium, you will play a pivotal role in transforming NATO's IT services to support its Digital Endeavour. You will be part of the NATO Cyber Security Centre (NCSC), which is tasked with managing all lifecycle activities related to cyber security. Your responsibilities will include leading and coordinating Red Team operations that simulate adversarial tactics against NATO's enterprise systems, ensuring operational security, and managing the engagement scope. You will also be responsible for translating technical findings into actionable recommendations for leadership and collaborating with the Red Team Technical Lead to develop custom tools and scripts to replicate sophisticated cyber threats. This position requires a proactive approach to cyber security and a commitment to staying updated with the latest technologies and trends.

Duties and Responsibilities:
The Red Team Lead will have a comprehensive set of responsibilities including: leading and coordinating Red Team operations with strategic oversight; planning, designing, and executing Red Team operations that simulate adversarial tactics; ensuring operational security; managing engagement scope and rules of engagement; translating technical findings into clear recommendations; serving as the primary liaison between the Red Team and strategic stakeholders; and collaborating with the Red Team Technical Lead to manage research and development activities. Additionally, the role involves developing and utilizing custom tools, scripts, and malware to replicate sophisticated cyber threats and evade detection mechanisms. A full list of duties can be found on the NCIA career site.

Required Qualifications:
Candidates must possess a Master’s degree from a nationally recognized university in a related discipline with at least 5 years of relevant experience, or a Bachelor’s degree with 8 years of relevant experience. Cybersecurity-oriented certifications such as CRTP, GPEN, GWAPT, OSCP, OSCE, OSEE, GXPN, and GREM are required. Candidates should have at least 5 years of practical experience in offensive cybersecurity, including roles such as vulnerability researcher, penetration tester, or red team operator. Extensive knowledge and experience in conducting Red Team engagements, web application penetration testing, IT infrastructure penetration testing, network security architecture design, and assessing security vulnerabilities are essential. Familiarity with system and network administration of UNIX and Windows systems, as well as proficiency in penetration testing tools and methodologies, is also required.

Educational Background:
The educational background required for this position includes a Master’s degree at a nationally recognized or certified university in a related discipline. Alternatively, a Bachelor’s degree is acceptable if accompanied by 8 years of post-related experience. Candidates are expected to have relevant cybersecurity certifications that demonstrate their expertise in the field.

Experience:
The position requires a minimum of 5 years of practical experience in the offensive cybersecurity field, specifically in roles such as vulnerability researcher, penetration tester, or red team operator. Candidates should have extensive experience leading Red Team engagements and a strong ability to stay updated with the latest security technologies and trends. Experience in leading interdisciplinary teams, preferably in an international environment, is also essential.

Languages:
Fluency in English, both written and spoken, is mandatory for this position. Proficiency in additional languages may be considered an asset but is not explicitly required.

Additional Notes:
This position offers a 5-year contract with a competitive tax-free salary, household and children’s allowances, and privileges for expatriate staff, including expatriation and education allowances. The role includes excellent private health insurance, generous annual leave of 30 days plus official holidays, and participation in the NATO Pension Scheme. The NCIA is committed to fostering an inclusive environment and is an equal opportunity employer, valuing diversity in its workforce.