Quality Assurance Engineer (Threat Sharing Platform and Integrations) for NATO with security clearance

An intelligence-sharing platform is only worth what its last release does.

You would run quality assurance for a multinational defence organisation’s deployment of an open-source threat-intelligence sharing platform and the integrations around it, in Mons, Belgium - working with the service delivery and engineering managers, system administrators, developers and data engineers, and with the open-source community itself.

What you would be doing

• Configuring and managing dedicated platform instances and the infrastructure they test on, with support from the system administration side
• Occasional basic operations on the production instances
• Appraising work against the organisation’s standards, identifying where it does not comply, and working out why
• Preparing and reporting on findings and the risks behind them
• Planning and managing the testing: specifying the environment, creating the cases and scenarios, and making sure they reflect realistic operating conditions and real coverage
• Documenting, analysing and reporting results so that something actually gets done about them
• Occasional support to the user community on the managed production instances
• Coordinating test activity with external parties, including the core project team and other community members

• At least five years of developing and executing software test strategies
• Test automation, and API testing
• Python scripting
• Basic Linux, Apache and MySQL or MariaDB operations
• Configuring web applications
• A good grasp of security principles, practice and technology
• The ability to work alone and in a team, including supporting the people around you
• Excellent organisation, communication and analysis, and professional English
• A bachelor’s degree in a related discipline with three years of related experience - or, exceptionally, ten years of progressive expertise in this work

Nice to have

• ISTQB or a similar testing certification
• Running a threat-sharing instance as an administrator, or writing code for one in Python or PHP
• Incident response experience, and work with open-source communities
• Multinational cyber exercises, and Red Hat