> Markdown version of [/jobs/ext/2029910-network-security-tool-manager-for-nato-with-security-clearance](https://www.wearedevelopers.com/jobs/ext/2029910-network-security-tool-manager-for-nato-with-security-clearance). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md). --- # Network Security Tool Manager for NATO with security clearance - **Company:** WLG - **Location:** Bergen, Belgium - **Experience:** Experienced - **Contract:** Permanent contract - **Skills:** Cyber Security, System Configuration, Data Centers, Linux, Monitoring of Systems, Intrusion Detection and Prevention, Network Security, Network Troubleshooting, Packet Analyzer, Security Information and Event Management, Data Streaming, Systems Integration, Cybercrime, Performance Monitor, Firepower, ArcSight Event Correlation, Cisco - **Published:** August 12, 2026 - **Apply:** https://www.adzuna.be/details/5837229466 ## About the Role * Expert knowledge of network security monitoring and cyber defence operations in an enterprise monitoring environment. * Extensive hands on experience supporting large scale, distributed security monitoring across multiple networks, sites, segments or data centres. * Enterprise experience with security monitoring and packet capture platforms such as Cisco Firepower, Corelight and NetWitness. * Strong hands on work with network visibility, traffic aggregation, packet brokers and packet capture. * Proven platform health and performance monitoring, capacity management, troubleshooting and operational governance. * An advanced understanding of enterprise networking - concepts, protocols, architectures and data flows. * Linux and network troubleshooting: connectivity, packet flow, interfaces, performance and system level diagnostics. * Practical experience of cabling, site surveys and the physical side of deploying monitoring infrastructure. * Strong knowledge of security telemetry collection, event correlation, threat detection and threat hunting. * English at NATO STANAG 6001 level 3, professional proficiency. * A relevant cyber security certification - CISM, CISSP or GIAC Security. * A bachelor's degree in a related discipline with two years of relevant experience; exceptionally, six years or more of progressive experience in the same work instead. Also valued * Designing large scale security monitoring and network visibility architectures. * Integrating monitoring tools with SIEM and SOAR platforms. * Automation, scripting or orchestration. * Major platform upgrades, migrations, refreshes and service transition. * Previous work in an international environment with both military and civilian elements, and a working knowledge of how NATO is organised., Practical detail ## Description A NATO cyber security operations centre in Mons can only detect what it can see. The platforms that give it that visibility - security monitoring, traffic aggregation and full packet capture across many networks, sites and data centres - need one person who owns them properly. That is this role. What you would be doing * Delivering and maintaining the network visibility and security monitoring capability the operations centre works from. * Acting as the subject matter expert for the operation, configuration and lifecycle of security monitoring and packet capture technology. * Managing that lifecycle end to end: deployment, configuration, maintenance, upgrades, obsolescence and decommissioning. * Configuring and tuning monitoring, traffic aggregation and packet capture so the data collection is reliable and the analysis is worth doing. * Watching platform health, availability, data quality, retention, storage use and performance. * Finding and closing the visibility gaps that would otherwise blunt threat detection. * Troubleshooting Linux, network, connectivity, performance and data collection problems across the monitoring environment. * Keeping the documentation real - architecture diagrams, inventories, operating procedures, support information. * Supporting the design of new monitoring solutions, and their integration with the wider analytics and incident management tooling. * Working with the security analysts and the detection engineers so monitoring coverage keeps up with what they need to detect. * Capacity planning and scalability assessment, and the compliance, audit and assurance work that comes with cyber defence technology. * Supporting cabling, deployment planning and site surveys for monitoring and visibility infrastructure, and taking part in cyber defence exercises when they run. ## Related Videos - [How Cisco embraced a DevOps culture within its network engineering team](https://www.wearedevelopers.com/videos/99-how-cisco-embraced-a-devops-culture-within-its-network-engineering-team) - [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure) - [Docker network without Docker](https://www.wearedevelopers.com/videos/1418-docker-network-without-docker) - [Computer Vision from the Edge to the Cloud done easy](https://www.wearedevelopers.com/videos/263-computer-vision-from-the-edge-to-the-cloud-done-easy) - [Docker exec without Docker](https://www.wearedevelopers.com/videos/1094-docker-exec-without-docker) - [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data) ## Related Articles - [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing) - [How We Built a Worry-Free System That Runs for 10+ Years – And What We’d Do Again](https://www.wearedevelopers.com/magazine/751-how-we-built-a-worry-free-system-that-runs-for-10-years-and-what-we-d-do-again) - [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking) - [Dev Digest 138 - Are you secure about this?](https://www.wearedevelopers.com/magazine/486-dev-digest-138-are-you-secure-about-this) - [The Most Popular IT Jobs on the Market](https://www.wearedevelopers.com/magazine/376-the-most-popular-it-jobs-on-the-market) - [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)