Jobs at SPEKTRUM GROUP

Conduct web, infrastructure, and application penetration testing; participate in NATO Red and Blue Teams; perform security design reviews; assess vulnerabilities and risks; provide security consultancy; develop mitigation plans; coordinate with accreditation stakeholders; and brief technical and executive audiences on findings and remediation.

Lead and coordinate security risk assessments and accreditation for CIS, identifying assets, threats, vulnerabilities, mitigation measures, and residual risk. Produce SRM reports, SRAs, SecOPs, SRS/SSRS and STVPs; develop KPIs/KRIs; manage risk teams across physical, personnel, information, threat, CIS and industrial security domains.

Support data source onboarding by maintaining registries, validating ingestion and data models, and analyzing asset, configuration, and vulnerability data. Lead data governance discussions, document technical findings, prepare recommendations and reports, and review services for compliance, security gaps, and vulnerability exposure. The role requires collaboration with NATO stakeholders, classified-data awareness, Splunk and SQL knowledge, and work onsite in Belgium with limited travel.

Provide maritime subject matter expertise to JFTC OPFOR and Scenario Teams for exercise planning, execution, and wargaming. Maintain maritime operational picture, support MEL/MIL workshops, coordinate maritime SMEs, prepare planning documents, contribute to FRAGOs/Annexes, dynamic scripting, targeting/BDA reporting, and SOP development with NATO threat and countermeasure knowledge.

Conduct web, infrastructure, and application penetration testing; participate in NATO Red and Blue Teams during military exercises; perform security design reviews; assess vulnerabilities; advise projects on security and risk mitigation; research security technologies; produce technical and executive reports; brief stakeholders; and coordinate accreditation activities across NATO organizations.

Conduct web, infrastructure, and application penetration testing; participate in NATO exercise Red/Blue Teams; perform security design reviews; advise projects on security and accreditation; assess vulnerabilities and risks; develop mitigation plans; coordinate with stakeholders; and present technical findings and reports to audiences ranging from engineers to senior military officials.

Deploys, configures, monitors, troubleshoots, and maintains digital forensics and XDR tools across NATO’s high-security environment. The role supports remote acquisition, endpoint forensics, detection tooling, automation, change management, technical documentation, and stakeholder coordination. It requires onsite work in Mons, Belgium, with occasional travel to other NATO sites.

Provides governance and administrative support for NATO information portals, document workflows, meeting minutes, conferences, and secretariat operations. Responsibilities include maintaining portal content and taxonomy, coordinating document reviews and approvals, tracking action items and KPIs, organizing meetings and events, supporting attendees, preparing minutes and reports, and improving administrative processes. The role requires strong communication, meticulous document control, Microsoft Office and SharePoint expertise, international environment experience, and a valid NATO or national Secret clearance.

Designs, develops, tests, deploys, and improves cyber detection rules across SIEM, EDR/XDR, NDR, and cloud platforms. Translates threat intelligence and MITRE ATT&CK behaviors into detection logic, assesses coverage gaps, supports threat hunting and incident response, and improves Detection-as-Code practices. Reviews log ingestion and normalization, analyzes PCAP and telemetry, supports investigations, develops detections for network security devices, and mentors junior analysts. The role is on-site in Mons, Belgium, supports NATO operations, and requires travel to other NATO locations when needed.

Supports project planning, scheduling, controls, documentation, financial and resource tracking, site access logistics, reporting, governance, and meeting administration. Maintains project plans, RAID and risk registers, change records, filing structures, dashboards, budgets, and calendars. Coordinates contractors, site visits, access permits, and project documentation while preparing reports and tracking actions for the Project Manager. Requires strong proficiency with Microsoft Project, ServiceNow, Excel, and Microsoft 365, plus a valid National or NATO Secret security clearance.

Serves as a second-line technical escalation point within a 24/7 Cyber Security Operations Centre. Reviews investigations, performs deep-dive log and threat analysis, tunes SIEM, SOAR, and EDR detections, conducts packet analysis, supports purple teaming and threat hunting, documents procedures, mentors junior analysts, and contributes to monitoring project planning. The role is full-time onsite in Mons, Belgium and requires a valid National or NATO Secret clearance with occasional travel to NATO sites.

Manage vulnerability assessments, analyze technical findings, create remediation action plans, and coordinate remediation with system administrators across NATO sites. Track open findings, prioritize risks, produce stakeholder reports, chair coordination meetings, support vulnerability monitoring and security bulletins, and brief governance meetings. The role requires vulnerability management experience, scripting for scan-result processing, strong communication skills, relevant cybersecurity certifications, and a valid National or NATO Secret clearance. The position is on-site in Mons, Belgium, with some travel to other NATO sites.

Senior engineer responsible for administering, deploying, monitoring, automating, and securing NATO’s MISP threat intelligence platforms. Duties include maintaining production and exercise instances, developing Python integrations with SIEM and IDS systems, managing Ansible automation, documenting installations, ensuring content quality, coordinating engineers, leading exercise operators, and delivering training. The role requires extensive LAMP system administration, deployment architecture, cybersecurity expertise, and a valid National or NATO Secret clearance.

Own and maintain threat intelligence data pipelines for NATO’s MISP platform. Develop Python integrations with SIEM, IDS, and other systems; normalize, enrich, deduplicate, and quality-check threat data; maintain MISP documentation; advise users on data curation and dissemination; lead MISP operators during exercises; and deliver training. The role requires extensive data engineering and cybersecurity experience, NATO or national Secret clearance, English proficiency, and on-site work in Mons, Belgium.

Deploy and configure RegScale within Kubernetes/PaaS environments to support continuous governance, risk, compliance auditing, and authorization to operate. Integrate identity platforms, cloud security services, Microsoft 365, Purview, APIs, and ticketing systems. Validate compliance data ingestion, telemetry normalization, control mappings, event-driven updates, and automated remediation workflows. Conduct stakeholder reviews, document technical data flows, support issue tracking, and contribute to continuous security accreditation for NATO environments.

Administer and support Jira and Confluence Datacenter environments, including deployment, configuration, integrations, user access, maintenance, monitoring, troubleshooting, backups, disaster recovery, migrations, and security patching. Customize workflows and dashboards, manage change requests, interface with Atlassian support, document procedures, and provide user assistance. The role requires collaboration with stakeholders, Microsoft integrations, and compliance with NATO security policies.

Administer and support Jira and Confluence Data Center environments, including deployment, configuration, integrations, user access, maintenance, upgrades, troubleshooting, backups, disaster recovery, migrations, security patching, and performance optimization. The role also provides technical user support, documentation, workflow customization, ITSM coordination, and collaboration with stakeholders while ensuring compliance with NATO security policies.

Perform quality assurance and acceptance testing for MISP software and NATO-specific integrations. Configure test instances and infrastructure, develop test strategies, automate tests, conduct API testing, document findings, and report risks. Provide basic system administration and production user support, coordinate with MISP developers and open-source communities, and help ensure continuous NATO MISP operations. The role is on-site in Mons and requires a valid National or NATO Secret clearance.

Designs, deploys, administers, secures, and troubleshoots complex Microsoft enterprise infrastructure in NATO environments. Responsibilities include Windows Server, Active Directory, identity and federation, PKI, SharePoint, Azure and DevOps services, automation, infrastructure-as-code, security hardening, vulnerability remediation, incident management, and technical architecture. The role also provides root-cause analysis, lifecycle management, documentation, and knowledge transfer for secure, highly available infrastructure.

Plans and conducts independent verification, validation, testing, formal reviews, and assessments for complex NATO projects and systems. Produces test plans, cases, traceability matrices, and reports; identifies non-compliance; manages V&V events; supports external contractors and operational acceptance. The role also coordinates stakeholders and tester, quality, or development teams across multinational projects.