Penetration Tester

NATO SECRET security clearance required

About wBrain

wBrain is a technology and management consulting company supporting organisations through digital transformation, specialised expertise and project delivery. We connect experienced professionals with complex, high-impact projects in international and multidisciplinary environments.

We are looking for a Senior Penetration Tester to join a highly specialised cybersecurity project in Mons, Belgium. The successful candidate will perform penetration testing activities, contribute to NATO military exercises and work closely with technical, executive and security accreditation stakeholders.

Main responsibilities

• Lead or participate in Red Team and Blue Team activities during NATO military exercises;
• Conduct IT infrastructure and network penetration testing;
• Assess network security architectures and identify potential weaknesses;
• Review security designs to ensure compliance with NATO policies, standards and directives;
• Identify and assess security vulnerabilities across operating systems, software, protocols, applications and networks;
• Research and evaluate emerging security products, technologies and attack techniques;
• Provide cybersecurity consultancy and technical advice to projects, programmes and other organisational entities;
• Evaluate security risks and develop appropriate mitigation and remediation plans;
• Produce clear and structured technical reports, including executive summaries, findings, risk assessments and remediation recommendations;
• Present security reports and penetration-testing results to both technical and executive audiences, including senior-level stakeholders;
• Collaborate with internal and external stakeholders, including security accreditation authorities, boards and technical teams;
• Support security accreditation processes through effective communication and technical input;
• Work closely with the Head of the Penetration Testing Cell to ensure proactive coordination and delivery.
• More than three years of professional experience in web application penetration testing;
• More than three years of experience in IT infrastructure penetration testing;
• More than three years of experience in network penetration testing;
• Strong knowledge of network security architecture and security design;
• Experience assessing vulnerabilities in operating systems, software, applications, protocols and networks;
• Experience using recognised penetration-testing tools, techniques and methodologies;
• Strong knowledge of UNIX/Linux and Windows system and network administration;
• Good understanding of authentication mechanisms and security protocols;
• Knowledge of cryptography, application security and network security;
• Experience with malware infection techniques and detection technologies;
• Ability to evaluate cybersecurity risks and develop practical mitigation plans;
• Proven ability to prepare reports for different audiences, from technical specialists to executive stakeholders;
• Strong written and verbal communication skills in English;
• Valid NATO SECRET security clearance.

Technical skills

• Infrastructure and Network Penetration Testing;
• Red Team and Blue Team Operations;
• Network Security Architecture;
• Vulnerability Assessment;
• Security Risk Assessment;
• UNIX/Linux and Windows Security;
• Application Security;
• Authentication and Security Protocols;
• Cryptography and Malware Analysis;
• Penetration-testing tools and frameworks;
• Security Accreditation and Compliance.

Scripting and automation

Practical experience with at least one of the following scripting languages is required:

• Perl;
• Python;
• Ruby;
• Shell scripting, including Bash, Ksh or Csh.

Personal capabilities

• Strong analytical and problem-solving skills;
• Ability to communicate complex security findings clearly;
• Confidence presenting to technical, management and executive audiences;
• High degree of autonomy, accountability and professional judgement;
• Ability to collaborate effectively with multidisciplinary and international teams;
• Proactive approach to stakeholder coordination;
• Strong attention to detail and commitment to quality.

If you have solid experience in offensive security, penetration testing and security architecture, and hold an active NATO SECRET clearance, we would be pleased to receive your application.