MISP Engineer (Threat Intelligence Platform Testing) for...

An intelligence-sharing platform is only worth what its last release does.

You would run quality assurance for a multinational defence organisation's deployment of an open-source threat-intelligence sharing platform and the integrations around it, in Mons, Belgium — working with the service delivery and engineering managers, system administrators, developers and data engineers, and with the open-source community itself.

What you would be doing

• Configuring and managing dedicated platform instances and the infrastructure they test on, with support from the system administration side
• Occasional basic operations on the production instances
• Appraising work against the organisation's standards, identifying where it does not comply, and working out why
• Preparing and reporting on findings and the risks behind them
• Planning and managing the testing: specifying the environment, creating the cases and scenarios, and making sure they reflect realistic operating conditions and real coverage
• Documenting, analysing and reporting results so that something actually gets done about them
• Occasional support to the user community on the managed production instances
• Coordinating test activity with external parties, including the core project team and other community members

What you would bring

• At least five years of developing and executing software test strategies
• Test automation, and API testing
• Python scripting
• Basic Linux, Apache and MySQL or MariaDB operations
• Configuring web applications
• A good grasp of security principles, practice and technology
• The ability to work alone and in a team, including supporting the people around you
• Excellent organisation, communication and analysis, and professional English
• A bachelor's degree in a related discipline with three years of related experience — or, exceptionally, ten years of progressive expertise in this work

Nice to have

• ISTQB or a similar testing certification
• Running a threat-sharing instance as an administrator, or writing code for one in Python or PHP
• Incident response experience, and work with open-source communities
• Multinational cyber exercises, and Red Hat

Why this one is worth a look

It sits where testing, security and open source meet — you would be working with the upstream project, not just consuming it.