Requirement: MISP Senior Data Engineer
Location: Mons, BELGIUM
Full Time On-Site: Yes
Time On-Site: 100%
Not to Exceed Rate: 87 EUR
Total Scope of the request (hours): 395
Required Start Date: 21 October 2026
End Contract Date: 31 December 2026
Required Security Clearance: NATO SECRET
Please do NOT apply for any NATO contract positions unless you meet ALL the following criteria:
- Current National or NATO SECRET clearance
- Nationality of one of the NATO member countries
- Current work visa for the specific location if applying for an in-country position
Duties & Role:
Under the direction of the CIMAT team lead the contractor shall perform the following tasks:
Threat information pipeline engineering:
- Design, build, and maintain pipelines that ingest threat information from diverse sources
- Develop ( python ) and maintain scripts to further automate and integrate MISP with other subsystems within NATO such as the SIEM, IDS, etc.
- Define, document and implement information dissemination rules
- Support initiatives around threat information process management
- Normalize heterogeneous feed structures into a consistent schema
- Enforce data quality: deduplication, confidence scoring, indicator lifecycle management, provenance tracking, tracking and filtering of low-quality data sources
- Provide input on, and integrate existing cyber threat information standards
- Create and maintain documentation on commonly used MISP taxonomies and galaxies
- Create and maintain documentation on "best practices for MISP data entry"
- Act as a subject matter expert for NATO MISP communities, providing community members with guidance on potential data curation and dissemination options and their benefits and limitations
- Provide support to the user-community of the NATO managed MISP instances
- Provide regular feedback to the user-community, and daily feedback during exercises
- During exercises, lead a team of multiple MISP Operators to support information flow, quality control and user management.
- Plan for, prepare and deliver online MISP training sessions.
- Support the preparation of individual training packages to validate the training objectives have been met.
Skills, Knowledge & Experience:
- The candidate must have a currently active NATO SECRET security clearance
- A minimum requirement of a Bachelor's degree at a nationally recognised/certified University in a related discipline and 3 years post-related experience;
- Or exceptionally, the lack of a university degree may be compensated by the demonstration of a candidate's particular abilities or experience that is/are of interest to NCIA, that is, at least 10 years extensive and progressive expertise in duties related to those in this Statement of Work.
- At least 10 years practical experience in designing, building and managing data pipelines for data structures encompassing data transformation, data models, schemas, metadata and workload management.
- At least 10 years practical experience in supporting, leading and/or managing data focused operations and projects, using data engineering tools to support data science, data analytics and data visualisation.
- At least 10 years practical experience in Python scripting
- Good understanding of cyber security principles, best practices, concepts and technologies
- Ability to work independently and in a team
- Excellent organization, communication and writing skills
- Language proficiency in English: meet or exceed the NATO STANAG 6001 Level 3 "Professional Proficiency".
