IT Security Officer

In addition to permanent officials, the European Commission offers non-permanent positions. There are two categories of non-permanent staff: temporary agents are recruited to fill vacant positions for a set amount of time or to perform highly specialised tasks. Contract agents may provide additional capacity in specialised fields where an insufficient number of officials is available or carry out a number of administrative or manual tasks. They are generally recruited for fixed-term contracts (maximum 6 years in any EU Institution), but in some cases they can be offered contracts for an indefinite duration (in offices, agencies, delegations or representations).

For more information on different staff categories 1Please note that the list of underrepresented Member States may be subject to future amendment based on potential data changes over time., CERT-EU is seeking to hire a driven, methodical Vulnerability Assessment and Automation Specialist to join its Offensive Security Team. The primary purpose of this role is to provide cybersecurity services to more than 90 European Union institutions, bodies, offices and agencies.

The successful candidate will help harden and scale our continuous surface monitoring services and actively contribute to our vulnerability assessment and management workflows. Beyond discovery and triage, the successful candidate will automate collection and analysis, integrate tooling into CI/CD pipelines, and deliver actionable metrics that advance CERT-EU’s data-centric initiative. Hands-on experience in vulnerability assessment and a passion for turning raw scan data into clear, defensible insight are essential. (Reference: Call for interest EC/2026/DIGIT/ )

The main activities of the selected candidate will include, but are not limited to:

• Vulnerability assessment and management
• Develop automation and integration for vulnerability scanning and discovery
• Data analysis and reporting

In addition to the main duties, the selected candidate will participate in the general set of tasks executed by the Offensive Security team, will be involved in projects aiming at delivering the related services and will participate in the definition, implementation and delivery of such projects., * Are a citizen of a Member State of the EU and enjoy full rights as a citizen;

• Have fulfilled any obligations imposed by applicable laws concerning military service;
• Are physically fit to perform the duties linked to the position;
• Produce the appropriate character references as to suitability for the performance of the duties.
• Have passed an EPSO CAST in the relevant Function Group for this position. At the stage of the application, it is sufficient to be registered in the EPSO CAST data base.

The ideal candidate must possess at least three years of relevant experience and possess a university-issued diploma or equivalent.

We are looking for a candidate who will demonstrate some of the following required skills and characteristics:

• Experience in service delivery.
• Experience in external attack surface monitoring.
• Experience in collecting and analysing high volumes of data and with related tools (e.g., Splunk).
• Familiarity with well-known security hardening standards (e.g., CIS Benchmarks).
• Excellent knowledge of the main GNU/Linux operating system distributions.
• Very good command of computer networking concepts.

The ideal candidate should also demonstrate the following required skills and characteristics:

• Hands-on experience in vulnerability assessment and management.
• Hands-on experience in developing automation and integration solutions.
• Excellent programming skills in Python, Go or similar languages.
• Strong analytical and problem-solving skills, including the ability to process large amount of information quickly.
• Ability to establish and maintain effective working relations with co-workers in an international and multidisciplinary work environment.
• Excellent communication skills in English, both orally and in writing.
• A focus on constant learning and improvement of technical and personal skills.
• The ability to adjust to a wide range of IT technologies and become proficient in new ones swiftly.

The candidate must hold a security clearance at EU SECRET level or be in a position to be security cleared. (Reference: Call for interest EC/2026/DIGIT/ ), Have a level of education which corresponds to completed university studies of at least three years attested by a diploma.

Only qualifications issued or recognised as equivalent by EU Member State authorities (e.g. by the Ministry of Education) will be accepted.

• Interesting and challenging positions with plenty of opportunities for training and acquiring new skills and competencies throughout your whole career
• Opportunities to try several areas of move between different policy your career
• A package of flexible working conditions including the possibility of teleworking - we care about your work-life balance
• A competitive financial package, including comprehensive healthcare, accident and pension schemes
• A multilingual, multicultural workplace where personal and career development are strongly promoted
• Multilingual schools for your children

Do you want to help shape the future of the European Union? Make the planet greener, promote a fairer society, or support businesses and innovation across the EU? Then come and work for the European Commission where you can really make a difference!

Commission staff are a diverse group of people, who are motivated to help make Europe - and the world - a better place. They come from the 27 Member States of the European Union. Different nationalities, backgrounds, languages and cultures make the Commission a vibrant and inclusive place to work., DIGIT-Digital Services is the Directorate whose aim is to deliver digital services to enable EU policies and to support the Commission’s internal administration. CERT-EU is the Cybersecurity Service for the European Union institutions, bodies, offices and agencies (Union entities). CERT-EU is administratively attached to DIGIT.

Established in 2011 to shore up the ICT security for the Union entities, we have been steadily expanding our IT security operations over the years and currently serve over 90 such entities spread across the Continent and beyond.

From our base in Brussels, we work with a range of peers, partners and researchers from all over the world to ensure we maintain our technological edge and have access to the best-in-class expertise.