MISP Engineer

An intelligence-sharing platform is only worth what its last release does. You would run quality assurance for a multinational defence organisation's deployment of an open-source threat-intelligence sharing platform and the integrations around it, in Mons, Belgium — working with the service delivery and engineering managers, system administrators, developers and data engineers, and with the open-source community itself. What you would be doing Configuring and managing dedicated platform instances and the infrastructure they test on, with support from the system administration side Occasional basic operations on the production instances Appraising work against the organisation's standards, identifying where it does not comply, and working out why Preparing and reporting on findings and the risks behind them Planning and managing the testing: specifying the environment, creating the cases and scenarios, and making sure they reflect realistic operating conditions and real coverage Documenting, analysing and reporting results so that something actually gets done about them Occasional support to the user community on the managed production instances Coordinating test activity with external parties, including the core project team and other community members What you would bring At least five years of developing and executing software test strategies Test automation, and API testing Python scripting Basic Linux, Apache and MySQL or MariaDB operations Configuring web applications A good grasp of security principles, practice and technology The ability to work alone and in a team, including supporting the people around you Excellent organisation, communication and analysis, and professional English A bachelor's degree in a related discipline with three years of related experience — or, exceptionally, ten years of progressive expertise in this work Nice to have ISTQB or a similar testing certification Running a threat-sharing instance as an administrator, or writing code for one in Python or PHP Incident response experience, and work with open-source communities Multinational cyber exercises, and Red Hat Why this one is worth a look It sits where testing, security and open source meet — you would be working with the upstream project, not just consuming it.