Security Tools Administrator (Adversary Emulation Platform) for NATO with security clearance

A red team is only as good as the tooling behind it - and somebody has to keep that tooling up. A defence cyber team near Mons runs a platform for emulating real adversary behaviour against its own estate. You would be the person who owns that platform end to end: the Linux underneath it, the containers it runs in, the accounts, the proxies and the monitoring that proves it is available when the team needs it.

What You Would Be Doing

• Installing, configuring and patching the Linux servers behind the platform, and managing accounts, permissions and security settings
• Configuring the network services it depends on, and keeping the proxy and access rules correct
• Reviewing logs and alerts before they become outages, verifying system health daily, and acting on tickets, changes and incidents
• Reporting on system health, monitoring activity and compliance - audit logs, performance, capacity trends
• Keeping the documentation and the inventory of integrated sources and tools genuinely current
• Testing backup restores, resolving performance bottlenecks, and automating away the manual work
• Acting as the subject-matter expert for the tool itself, through its whole lifecycle

What you would bring

• A computer science or IT degree, or equivalent experience instead of one
• Several years in IT security with a focus on system administration and security tool management in a large organisation
• Strong Linux administration, Docker container management, and confident scripting in Python, shell or PowerShell
• IP switching, routing and network troubleshooting; virtual infrastructure on VMware
• Log analysis as a diagnostic skill - you spot the abnormal, not just the broken
• Welcome extras: service management and monitoring tooling, configuration automation such as Ansible, ITIL, and certification such as CISSP, CISM or CISA

Why this one is worth a look It is a single, clearly owned platform in a serious security environment, with no travel attached, and it runs from a standing framework rather than a one-off project.