Senior MISP Integration Engineer – Cyber Threat Intelligence

pWe are seeking a highly experienced Senior MISP Integration Engineer to support the modernization and integration of a Cyber Threat Intelligence (CTI) capability within a multinational defense environment.br/ppThe successful candidate will bring deep hands-on expertise in the Malware Information Sharing Platform (MISP), threat intelligence automation, API integrations, intelligence enrichment, and secure information-sharing workflows.br/ppThis role is suited to an engineer who has deployed, configured, integrated, and maintained MISP in production environments and understands how threat intelligence supports real-world security operations.br/ph3Key Responsibilitiesbr/h3pAssess, configure, enhance, and integrate existing MISP instances within enterprise cybersecurity environments.br/ppDesign and implement MISP integrations with SIEM, EDR, threat intelligence feeds, vulnerability management, and other cybersecurity platforms.br/ppDevelop and maintain integrations using PyMISP, REST APIs, Python, and supported intelligence exchange mechanisms.br/ppImplement automated intelligence collection, enrichment, normalization, deduplication, correlation, and distribution workflows.br/ppConfigure MISP taxonomies, galaxies, warning lists, event attributes, sharing groups, and distribution controls.br/ppDevelop secure intelligence-sharing workflows aligned with classification and information-handling requirements.br/ppImplement STIX/TAXII interoperability where required by the approved solution design.br/ppOptimize MISP performance, scalability, reliability, and integration resilience.br/ppDevelop automated workflows for indicators of compromise, adversary profiling, threat hunting, and security alert enrichment.br/ppTroubleshoot integration failures, data quality issues, API errors, and intelligence synchronization problems.br/ppSupport deployment in NATO UNCLASSIFIED and NATO SECRET environments.br/ppDevelop technical documentation, configuration baselines, test procedures, and operational runbooks.br/ppParticipate in system integration testing, security verification, customer acceptance, and operational transition.br/ppProvide technical knowledge transfer to cybersecurity analysts and platform administrators.br/ph3Requirements /h3h3Required Qualificationsbr/h3pBachelor's degree in Computer Science, Cybersecurity, Software Engineering, or equivalent professional experience.br/pp7+ years of cybersecurity, software integration, or security engineering experience.br/pp3+ years of hands-on MISP deployment, administration, development, or integration experience.br/ppDemonstrated experience implementing MISP integrations in production environments.br/ppStrong Python and PyMISP development skills.br/ppExperience with REST APIs, JSON, STIX/TAXII, and threat intelligence data exchange.br/ppStrong Linux administration and troubleshooting skills.br/ppUnderstanding of MISP architecture, event models, taxonomies, galaxies, sharing groups, and distribution controls.br/ppExperience integrating threat intelligence with SIEM, SOC, EDR, and security automation platforms.br/ppKnowledge of the MITRE ATTCK framework, threat intelligence lifecycle, and IOC management.br/ppExperience developing and troubleshooting secure API-based integrations.br/ppAbility to produce clear technical documentation and support formal integration testing.br/ppProfessional proficiency in English.br/ppAbility to work at customer locations in Belgium.br/ph3Security Requirementsbr/h3pMust have an active NATO SECRET clearance or a national security clearance acceptable for NATO SECRET access, subject to formal verification.br/p