Penetration Tester
Role ID – C004912
Role Background
The Penetration Tester will support NATO security activities by
performing penetration testing, security assessments, and security design
reviews across web applications, IT infrastructure, networks, and
applications. The role also supports NATO military exercises through Red
and Blue Team activities and provides security advice to technical teams,
projects, and senior stakeholders.
Role Duties and Responsibilities
Lead or participate in Red Team and Blue Team activities during
NATO military exercises.
Perform web application, infrastructure, and application-level
penetration testing.
Conduct security design reviews to ensure compliance with NATO
security policies and directives.
Provide cybersecurity consultancy and technical security advice to
projects, plans, and other stakeholders.
Identify and assess security vulnerabilities across operating
systems, software, protocols, applications, and networks.
Evaluate cybersecurity risks and recommend appropriate mitigation
and remediation actions.
Research and assess security products, tools, and technologies.
Work closely with internal and external stakeholders involved in
security accreditation.
Coordinate with the NCIA Configuration Control Board, Security
Accreditation Boards, NATO Security Accreditation Authorities, and
relevant NCI Agency teams.
Prepare clear and structured penetration testing and security
assessment reports.
Present security findings and testing outcomes to both technical and
executive audiences, including senior leadership.
Coordinate closely with the Head of the Penetration Testing Cell and
maintain effective stakeholder collaboration.
Essential Skills
Strong knowledge of web application penetration testing.
Strong knowledge of IT infrastructure penetration testing.
Knowledge of network security architecture and design.
Ability to identify and assess vulnerabilities in operating systems,
software, protocols, and networks.
Experience using penetration testing tools, techniques, and
recognized testing methodologies.
Knowledge of UNIX and Windows system and network
administration.
Scripting skills in at least one of the following:
o Python
o Perl
o Ruby
o Bash or other shell scripting
Strong technical knowledge of:
o System and network security
o Authentication and security protocols
o Cryptography
o Application security
o Malware infection techniques
o Malware protection technologies
Ability to evaluate cybersecurity risks and develop mitigation plans.
Strong technical reporting skills, including writing executive
summaries, technical findings, and remediation plans for different
audiences.
Strong stakeholder communication and presentation skills.
Experience
More than 3 years of relevant professional experience in
penetration testing and the required cybersecurity areas.
Hands-on experience with web application and infrastructure
penetration testing.
Experience assessing security vulnerabilities across networks,
systems, applications, software, and protocols.
Experience using established penetration testing methodologies and
security testing tools.
Experience researching and evaluating cybersecurity technologies
and products.
Experience communicating technical security findings to both
technical and senior/executive stakeholders.
Working Location
The Hague, Netherlands
Working Policy
Full-time on-site position in The Hague.
Normal office working conditions.
Approximately 10 days of travel are expected for this
assignment.
Required start date: 29 September 2026.
Contract end date: 31 December 2026.
Total scope: 697 hours.
NATO Secret Security Clearance is required.
Travel
Some travel to other NATO sites may be required
Security Clearance
Valid NATO Secret security clearance.
