We are seeking a highly experienced
Senior Technical Lead - Cyber Threat Intelligence (CTI) / MISP
to support a major NATO cyber modernization initiative. The successful candidate will lead the technical design, implementation, integration, and operation of an on-premises Cyber Threat Intelligence platform and serve as the primary technical authority throughout the project lifecycle.
This role requires deep expertise with the
Malware Information Sharing Platform (MISP)
and the ability to lead complex integrations in mission-critical and security-sensitive environments.
Location:
Remote with occasional onsite work in
The Hague, Netherlands Duration:
Initial deployment period of up to 17 months, followed by 12 months of transition-to-operations support Security Clearance:
Active NATO SECRET Clearance (Mandatory)
Mandatory Requirements
Candidates must meet
both
of the following requirements:
Active
NATO SECRET Personnel Security Clearance
at the time of application.
Minimum
five (5) years of demonstrable hands‑on experience with MISP , including:
MISP deployment
MISP administration
MISP architecture and design
MISP integration
MISP automation
Threat intelligence sharing
Key Responsibilities
Lead the technical architecture and design of the CTI solution.
Oversee installation, configuration, and deployment of MISP-based solutions.
Design and implement integrations with enterprise security platforms and intelligence sources.
Lead system testing, validation, troubleshooting, and performance optimization activities.
Coordinate technical activities with NATO stakeholders and project teams.
Work closely with commercial CTI technology partners and vendors.
Develop technical documentation, deployment procedures, and implementation plans.
Support transition‑to‑operations and knowledge transfer activities.
Provide technical guidance and mentorship to project team members.
Desired Technical Experience
Strong experience in the following areas is highly desirable:
STIX/TAXII standards
Cyber Threat Intelligence (CTI) platforms
Splunk SIEM integration
REST API development and integration
Threat intelligence feeds and intelligence‑sharing platforms
Linux system administration
Security automation and orchestration
High‑availability and resilient architectures
Enterprise cybersecurity solutions
Preferred Background
Candidates with experience in any of the following environments will be viewed favorably:
NATO organizations
Defense or military environments
Classified networks
Air‑gapped systems
Government cybersecurity programs
Candidate Submission Requirements
Interested candidates should provide:
Updated CV/Resume
Documentary evidence of active NATO SECRET clearance
Summary of MISP experience clearly demonstrating at least five years of relevant experience
Confirmation of ability to travel to and work onsite in The Hague, Netherlands, when required
#J-18808-Ljbffr
