[6171] Software Engineer (Cyber Threat Intelligence Platform)

Brussels, Belgium (Hybrid – ~50% on-site)
Contract: Aug–Dec 2026 (extensions into 2027 & 2028 likely)
Clearance: NATO SECRET (mandatory)
The Role
This is a hands-on Software Engineer position within NATO’s Cyber Threat Analysis Branch, focused on building and enhancing a cloud-based cyber threat intelligence platform. You’ll work closely with cloud engineers, data scientists, and threat analysts to develop scalable, secure, and data-driven capabilities supporting NATO’s cyber operations.
Key Responsibilities
• Develop and maintain applications and extensions for a cyber threat intelligence platform
• Build and manage data pipelines and API integrations (internal and external data sources)
• Work on AWS cloud infrastructure, supporting scalable and secure deployments
• Develop and maintain CI/CD pipelines and containerised applications (Docker/Kubernetes)
• Collaborate with data scientists to integrate AI/ML (including LLMs) into the platform
• Improve data ingestion, processing, and correlation of large datasets
• Ensure code quality, security, and proper documentation
• Contribute to architecture decisions and continuous platform improvements
• Work closely with technical and non-technical stakeholders across NATO
Requirements
• Active NATO SECRET clearance (required at submission)
• Strong software engineering background (degree or equivalent experience)
• Proficient in Python
• Experience with AWS and modern cloud architecture
• Strong experience with APIs (REST), data integration, and backend development
• Experience with Docker and Kubernetes
• Familiarity with CI/CD pipelines and infrastructure as code (e.g. Terraform)
• Strong Linux and Git experience
• Ability to work in a collaborative, multi-disciplinary environment
• Fluent English



Desirable
• Experience in cybersecurity or threat intelligence environments
• Knowledge of Storm Query Language (Synapse)
• Experience with Azure
• Full-stack development experience
• Experience working in defence, government, or intelligence environments
Key Details
• Hybrid role (~2 days on-site per week in Brussels)
• 4-day working week structure (approx.)
• Contract extension likely into 2027 and 2028
• Candidates must manage their own work eligibility in Belgium
This role is ideal for a software engineer who enjoys working on complex, real-world problems at the intersection of cloud, data, and cybersecurity, with the opportunity to contribute to NATO’s cyber threat intelligence capabilities.