> Markdown version of [/jobs/ext/18586-c004893-digital-forensics-platform-administrator-ns-fri-29-may](https://www.wearedevelopers.com/jobs/ext/18586-c004893-digital-forensics-platform-administrator-ns-fri-29-may). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # C004893 Digital Forensics Platform Administrator (NS) - FRI 29 May - **Company:** Company EMW - **Location:** (Bergen), Belgium - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** ARM Architecture, Audit Trail, Microsoft Azure, Bash Shell, Collaborative Software, Cyber Security, Digital Forensics, Event Logging, IP Address Management, Python (Programming Language), Windows Servers, Network Service, Windows PowerShell, Red Hat Enterprise Linux, Ansible, Remote Infrastructure Management, Forensic Toolkit, Scripting, Load Balancing, Firewalls (Computer Science), Azure Security Center, Information Technology, Atlassian Tools, Integration Frameworks, Nintex - **Published:** May 20, 2026 - **Apply:** https://www.careerjet.be/jobad/be7e8ec84d61dfa4733d2ebbb42ad4b258 ## About the Role * The candidate must have a currently active NATO SECRET security clearance * Essential to have a Bachelor's Degree in Computer Science (or similar) combined with a minimum of 2 years' experience in Cyber Security related post as a Security Engineer or similar position, or a Secondary education and completed advanced vocational education (leading to a professional qualification or professional accreditation) with 5 years post related experience. Exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCI Agency; that is, at least 8 years extensive and progressive expertise in the duties related to the function of the post. * At least 5 years of experience in deploying, managing and maintaining forensics and XDR tools in complex environments; * At least 2 years of experience with remote acquisition tooling (Fidelis and/or F-Response) with demonstrated ability to configure, support deployment at scale including resolving failed collections and performance issues. * At least 2 years of experience with collaboration tools such as Jira and Confluence; * Strong understanding of forensically sound acquisition principles (integrity verification, repeatability, minimizing system impact). * Windows Server/Desktop administration skills: services, drivers, certificates, event logs, permissions, remote management. * Ability to diagnose host-level issues impacting forensic tools (resource contention, disk I/O, endpoint controls, OS patch impacts). * Experience with Red Hat Linux and managing a fleet of servers with Ansible * Have an in-depth understanding of infrastructure concepts related to Hosting, Networks, IP address Management, firewalls, certificates, Load balancing and Proxy; * Experience working with vendors (support tickets, log bundles, upgrades) and communicating impacts/ETAs to investigators/analysts. * Experience implementing least-privilege access, credential handling, and audit logging for forensic systems. * Knowledge and demonstrable experience with scripting languages and integration tools including PowerShell, Python, Bash, Batch and Ansible; * Good understanding of cyber security concepts; * Good understanding of network communication protocols; * Good verbal and written communication skills in English; * Strong team-spirit attitude; * Ability to produce detailed technical documentation and follow change management processes. Desirable * Professional experience in digital forensic analysis; * Past experience working for NATO or in an international organization; * Experience with Microsoft Azure, Microsoft Defender for Endpoint. ## Description As part of a small team of technical experts performing the tasks listed above, your main duties will be to: * Design, set up, and manage a suite of digital forensics acquisition tools (ex.: F-Response, Velociraptor, X-Ways, Axiom) ensuring seamless integration with other technologies present on the network. * Ensure that the deployment and operation of forensic and XDR tools (ex.: Fidelis, CrowdStrike, Cortex, Defender XDR) meet strict security requirements and comply with IT Service Management policies governing the network environment. * Apply best practices in forensic workflow automation by leveraging tools and technologies like N8N, Ansible and Magnet Automate to enhance efficiency and reliability. * Ensure that forensic tools are properly configured with the necessary routing and network rules, enabling secure and reliable access across different segments of the network. * Lead or contribute to the creation and ongoing maintenance of comprehensive documentation and Standard Operating Procedures (SOPs) to support operational continuity and compliance. * Collaborate closely with team members and end users to incorporate feedback, continuously improving the quality and effectiveness of the delivered digital forensics capabilities. Deliverables The main deliverables as will be to: * The service provider shall deploy, configure, and maintain the suite of digital forensics and XDR tools, ensuring all systems are kept up to date in accordance with IT Service Management (ITSM) processes. * The provider is expected to integrate user feedback and implement enhancements to improve usability and effectiveness, which may include developing automation scripts or custom configurations to meet operational requirements. * For coordination purposes and due to the access required, the provider of this service shall work onsite, at SHAPE, Mons, Belgium. * The service provider shall be responsible for complying will all applicable local employment laws, in addition to following all SHAPE & NCIA onboarding procedures. Delivery of the service cannot begin until these requirements are fulfilled. * The service provider shall not be required to work on NCIA holidays. ## Related Videos - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java) - [Dev & Test in the Cloud? Deploy your cloud environments with Ansible & Terraform](https://www.wearedevelopers.com/videos/1607-dev-test-in-the-cloud-deploy-your-cloud-environments-with-ansible-terraform) - [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers) - [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script) - [Eclipse Che for Infrastructure Automation](https://www.wearedevelopers.com/videos/1611-eclipse-che-for-infrastructure-automation) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents) - [Dev Digest 121 - AI goes offline](https://www.wearedevelopers.com/magazine/456-dev-digest-121-ai-goes-offline) - [Top 6 Hackathons for Developers in 2023](https://www.wearedevelopers.com/magazine/263-top-6-hackathons-for-developers-in-2023) - [Where To Find Software Engineering Jobs](https://www.wearedevelopers.com/magazine/396-where-to-find-software-engineering-jobs) - [Where to Find Entry-Level Software Engineering Jobs](https://www.wearedevelopers.com/magazine/397-where-to-find-entry-level-software-engineering-jobs)