Cyber Threat Intelligence Researcher (TTPs, MITRE ATT&CK, Python) for NATO with security clearance

A multinational defence headquarters in Brussels is looking for a cyber threat intelligence researcher to join a small team that turns technical research into reporting for network defenders and decision makers.

What you would be doing

• Researching threat actor groups and their tactics, techniques and procedures
• Writing scripts and queries that track adversary infrastructure and tooling automatically
• Producing technical intelligence, including detection signatures, for defenders and threat hunters
• Helping turn technical findings into operational and strategic assessments
• Working closely with other researchers, giving and taking feedback

• A degree in a quantitative field with strong computer science content and 2 years of relevant experience, or 4 years of similar work plus recognised certifications
• Hands-on analysis of threat actors, attack patterns and TTPs with real impact on defence
• Working knowledge of the intelligence lifecycle, analytic tradecraft and MITRE ATT&CK
• Solid network and system fundamentals and experience in at least one of: network monitoring, threat hunting, incident response, red teaming, forensics or reverse engineering
• Scripting in Python
• Clear writing that non-specialists can follow