Deadline Date: Monday 14 September 2026

Requirement: MISP Engineer

Location: Mons, BE

Full Time On-Site: Yes

Time On-Site: 100%

Total Scope of the request (hours): 395

Required Start Date: 20 October 2026

End Contract Date: 31 December 2026

Required Security Clearance: NATO SECRET

Duties & Role:  

This role mainly entails performing quality assurance (software testing) of the open-source MISP software and NATO-specific integrations, in coordination with other people working on the service. The goal is to ensure continuous operations for NATO's MISP and related integrations. The MISP engineer will work closely with the service delivery manager, engineering manager as well as system administrators, developers, and data engineers working within the team. Furthermore, the role will require engagement with open-source community members.

Under the direction of the DICE Team Lead the contractor shall perform the following tasks:

System administration:

• With support from sysadmin-oriented colleagues, configure and manage dedicated MISP instances and related infrastructure for testing
• Occasionally perform basic operations on production NATO MISP instances

Quality assurance

• Evaluate, appraise and identify non-compliances with organizational standards, and determine the underlying reasons for non-compliance
• Prepare and report on assessment findings and associated risks

Software (acceptance) testing:

• Plan and manage testing activity
• Specify the testing environment
• Manage the creation of test cases and scenarios
• Ensure that the defined tests reflect realistic operational conditions and required level of coverage
• Ensure tests and results are documented, analyzed and reported to stakeholders, and required actions are taken

User and Community Management:

• Occasionally provide basic support to the user-community of the NATO managed production MISP instances

Coordination

• Coordinate testing activities with external parties (core MISP project team and other community members)

Specific Working Conditions: The contractor may work from their home in the duty location subject to the NCIA teleworking policy and in coordination with their NCIA designated Resource Manager. The contractor may be permitted to perform work remotely, from a different NATO nation than the duty location, for up to a maximum of twenty percent (20%) of their total working time, subject to prior approval by their NCIA designated Resource Manager. If working from a remote location, the contractor shall provide IT equipment for the processing of public and unclassified information in support of their duties, including the capability to participate in video meetings using Microsoft based collaboration tools.

Travel required: The contractor may be required to travel to other NCIA locations for in-person or department meetings. In such cases the contractor will be reimbursed for travel costs according to NATO regulations for traveling on NATO duty. Each travel will be a maximum of 2 days lengths and happening no more than twice per month. Contractors traveling for work purposes shall initiate travel requests from their designated duty station only.

Requirements

Skills, Knowledge & Experience:

• The candidate must have a currently active NATO SECRET security clearance
• A minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience;
• Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work.
• At least 5 years practical experience in development and execution of software test strategies
• At least 5 years practical experience in test automation
• At least 5 years practical experience in API testing
• At least 5 years practical experience in Python scripting
• At least 5 years practical experience in performing basic Linux, Apache, MySQL/MariaDB operations
• At least 5 years practical experience in configuration of web applications
• Good understanding of cyber security principles, best practices, concepts and technologies
• Ability to work both independently and within a team to achieve desired outcomes, including the ability to monitor and support a team
• Excellent organization, communication analytical skills
• Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency".

Desirable Experience:

• ISTQB or other similar certifications
• Prior experience as sysadmin of a MISP Threat Sharing
• Prior experience in developing code (python, PHP) for MISP
• Prior experience in incident response
• Prior experience working with open-source communities
• Prior experience in multinational cyber exercises e.g. Locked Shields, Crossed Swords, Cyber Coalition, etc
• Experience with RedHat