PpbRequired Security Clearance /b: NATO SECRET /p h3SCOPE OF WORK /h3 pThe Senior Penetration Tester will operate under the guidance of the Team Lead in the Penetration Testing Section, conducting comprehensive penetration testing and security assessments across NATO networks and systems. Key activities include: /p ul liPerform web, infrastructure, and application-level penetration testing, covering COTS and NOTS/GOTS software. /li liParticipate in kick‑off meetings with stakeholders to identify testing requirements. /li liFollow documented procedures, workflows, and best‑practice methodologies defined by technical leads. /li liAttend team meetings and collaborate with internal and external stakeholders as required. /li liWrite technical reports in fluent English, adhering to defined templates and reporting tools. /li liBrief both executive and technical audiences, including flag‑officer level, on security findings and outcomes. /li liIf new vulnerabilities are discovered in COTS software, initiate the Responsible Disclosure Process and coordinate follow‑up with vendors. /li liCoordinate proactively with the Technical Lead to ensure collaboration across the testing team. /li liStay current with technological developments relevant to penetration testing. /li liPerform additional duties as may be required. /li /ul h3SKILL, KNOWLEDGE EXPERIENCE /h3 pMandatory Experience and Education /p ul liBachelor of Science in a technical subject with substantial IT content and at least 3 years post‑related experience; alternatively, at least 10 years of progressive experience in the relevant duties may compensate for no degree. /li liAt least 3 years of extensive experience in web application penetration testing. /li liAt least 3 years of extensive experience in IT infrastructure penetration testing. /li liAt least 3 years of experience in network security architecture design. /li liAt least 3 years of experience in assessing security vulnerabilities within operating systems, software, protocols, and networks. /li liAt least 3 years of experience in researching and evaluating security products and technologies. /li liKnowledge of UNIX and Windows system and network administration. /li liAt least 3 years of experience using recognized penetration testing tools, techniques, and methodologies. /li liProficiency in Python, Go, PowerShell, or shell scripting (bash, ksh, csh). /li liTechnical knowledge of system and network security, authentication and security protocols, cryptography, application security, and malware protection. /li liAbility to evaluate risks and formulate mitigation plans. /li liProven capability to brief senior executives on security findings. /li liProven ability to write clear, structured technical reports for diverse audiences. /li /ul h3Desirable Experience and Education /h3 ul liProfessional certifications: OSCP, OSCE, OSWE, GPEN, CREST Certified Web Application Tester, GXPN, GWAPT, or equivalent. /li liFamiliarity with risk analysis methodologies. /li liExperience working in an international environment with military and civilian components. /li liKnowledge of NATO organization, internal structure, and relationships. /li /ul h3Language Proficiency /h3 ul liFluency in one of the two official NATO languages (written and spoken); knowledge of the other language is desirable. Most work is conducted in English. /li /ul h3Contract Type /h3 pThis is a Deliverables‑based contract. /p /p #J-18808-Ljbffr