Red Team Technical Lead

Job Posting Organization:
The NATO Communications and Information Agency (NCIA) has been a pivotal part of NATO for over 70 years, dedicated to preserving peace and security" style="border-bottom: 1px dotted #007bff !important;">security for nearly one billion citizens. With a workforce of around 3000 civilian and military staff, NCIA operates in 29 locations across Europe, North America, and Asia. The agency focuses on providing the technological backbone that enables NATO's operations, ensuring that the alliance remains connected and capable of responding to various challenges. The NCIA is committed to hiring, training, and retaining top talent to maintain its technological edge, emphasizing the importance of its personnel in achieving its mission.

Job Overview:
As a Red Team Technical Lead based in Mons, Belgium, you will play a crucial role in transforming NATO's IT services to support its Digital Endeavour. You will be part of the NATO Cyber Security Centre (NCSC), which is responsible for the lifecycle management of cyber security activities. Your role will involve leading the design, development, and operation of red team infrastructure and R&D capabilities, ensuring that NATO can effectively counter sophisticated cyber threats. You will collaborate with Red Team Operator Leads to tailor infrastructure and tools to meet mission needs, manage research and development activities, and mentor team members to enhance their capabilities. This position requires a proactive approach to maintaining operational security and developing innovative solutions to replicate real-world cyber threats.

Duties and Responsibilities:
The duties and responsibilities of the Red Team Technical Lead include leading and coordinating the design and development of red team infrastructure, collaborating with Red Team Operator Leads to customize tools for specific missions, ensuring operational security for deployed infrastructure, managing research and development activities to create automation and custom tools, advising and mentoring team members, maintaining documentation and secure configurations, providing and maintaining red team operation infrastructure, overseeing the management and development of cyber range capabilities, and ensuring that all activities reflect the latest threat actor tactics and emerging technologies. A comprehensive understanding of the cyber security landscape and the ability to adapt to evolving threats is essential for success in this role.

Required Qualifications:
Candidates must possess a Master’s degree from a nationally recognized university in a related discipline, along with at least 5 years of relevant post-related experience. Alternatively, a Bachelor’s degree with 8 years of post-related experience is acceptable. Additionally, candidates should hold cybersecurity-oriented certifications such as CRTP, GPEN, GWAPT, OSCP, OSCE, OSEE, GXPN, or GREM, and have practical experience in roles such as security analyst, vulnerability researcher, penetration tester, or red team operator. In-depth knowledge of adversary emulation, red teaming, and purple teaming is required, along with an understanding of the MITRE ATT&CK Framework and various detection methods. Candidates should also demonstrate proficiency in creating custom tools for red team engagements and possess strong technical knowledge in system and network security, authentication protocols, cryptography, and application security.

Educational Background:
The educational background required for this position includes a Master’s degree from a nationally recognized or certified university in a relevant field. Candidates with a Bachelor’s degree are also considered, provided they have sufficient post-related experience. The emphasis is on obtaining a degree that equips candidates with the necessary theoretical and practical knowledge to excel in the cybersecurity domain, particularly in red teaming and adversary emulation.

Experience:
Candidates should have a minimum of 5 years of practical experience in the cybersecurity field, specifically in roles related to security analysis, vulnerability research, penetration testing, or red teaming. This experience should demonstrate a deep understanding of the cybersecurity landscape and the ability to lead interdisciplinary teams, preferably in an international environment. Proven experience in managing complex projects and adapting to evolving cyber threats is essential.

Languages:
Fluency in English, both written and spoken, is mandatory for this position. Strong communication skills are essential for effectively conveying technical information to both technical and non-technical audiences. While English is the primary language required, knowledge of additional languages may be considered an asset, particularly in an international organization like NATO.

Additional Notes:
The position offers a 5-year contract with a competitive tax-free salary, along with household and children's allowances. Expatriate staff will receive privileges such as expatriation and education allowances, as well as additional home leave. The role includes excellent private health insurance and generous annual leave of 30 days, in addition to official holidays. Employees are also eligible for the NATO Pension Scheme and have access to various development programs, including professional training and wellbeing initiatives. The NCIA is committed to being an equal opportunity employer, fostering an inclusive environment that values diversity in all its forms.