> Markdown version of [/jobs/ext/2812363-lead-red-team-architect-cyber-threat-emulation-infra-lead](https://www.wearedevelopers.com/jobs/ext/2812363-lead-red-team-architect-cyber-threat-emulation-infra-lead). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Lead Red Team Architect - Cyber Threat Emulation & Infra Lead

- **Company:** NATO Communications and Information Agency (NCIA)
- **Location:** Bergen, Belgium
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Cyber Security, Emulators, Red Team (Cyber Security), Cyber Threat Analysis, Cyber Warfare
- **Published:** September 10, 2026
- **Apply:** https://www.collegerecruiter.com/job/2858144593-lead-red-team-architect--cyber-threat-emulation--infra-lead

## About the Role

Ideal candidates have 5+ years in cybersecurity, certifications such as CRTP, OSCP, OSCE, GPEN, GXPN, strong adversary
#J-18808-Ljbffr

## Description

Based in Mons, Belgium, you will join NATO Communications and Information Agency (NCIA) as Red Team Technical Lead within the NATO Cyber Security Centre (NCSC), shaping red team infrastructure, tooling and R&D in support of offensive cyber operations. You will coordinate with Red Team Operator Leads to tailor capabilities for mission needs and maintain secure configurations.


## Related Videos

- [Thinking Differently - How to Make Money from Cyber Attacks & Cheats](https://www.wearedevelopers.com/videos/745-thinking-differently-how-to-make-money-from-cyber-attacks-cheats)
- [Cyber Sleuth: Finding Hidden Connections in Cyber Data](https://www.wearedevelopers.com/videos/893-cyber-sleuth-finding-hidden-connections-in-cyber-data)
- [What makes Cybersecurity different for critical infrastructure?](https://www.wearedevelopers.com/videos/571-what-makes-cybersecurity-different-for-critical-infrastructure)
- [Cyber Security: Small, and Large!](https://www.wearedevelopers.com/videos/259-cyber-security-small-and-large)
- [WeAreDevelopers LIVE – Web Scraping, Agents, Actors and more](https://www.wearedevelopers.com/videos/1764-wearedevelopers-live-web-scraping-agents-actors-and-more)
- [Capture the Flag 101](https://www.wearedevelopers.com/videos/416-capture-the-flag-101)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Dev Digest 134 - Where pixels sing?](https://www.wearedevelopers.com/magazine/477-dev-digest-134-where-pixels-sing)
- [Dev Digest 191: Malware interviews, EU ❤️ Open Source and Skilled Agents](https://www.wearedevelopers.com/magazine/645-dev-digest-191-malware-interviews-eu-open-source-and-skilled-agents)
- [Fully Remote Software Engineer Jobs](https://www.wearedevelopers.com/magazine/447-fully-remote-software-engineer-jobs)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)
- [What’s the Difference between a Junior, Mid, and Senior Developer?](https://www.wearedevelopers.com/magazine/238-what-s-the-difference-between-a-junior-mid-and-senior-developer)