Bridge351 is looking for a Cybersecurity Engineer to join the Cybersecurity Operations unit of the General Secretariat of the Council (GSC) of the European Union, specifically within the Engineering service.

About the project

The Cybersecurity Operations unit is responsible for monitoring, detecting, and responding to cybersecurity threats and incidents in real time, across all information and communication systems within the GSC, with the goal of continuously improving the organization's cybersecurity posture.

Key responsibilities

• Create custom internal scripts for automating tasks, analyzing data, and integrating APIs with security platforms and infrastructure tools

• Deploy, manage, and harden servers based on Linux, Windows, and VMware ESXi

• Configure and maintain network devices (switches, routers, firewalls, VPN gateways)

• Prepare vulnerability assessment reports, remediation plans, dashboards, and metric reports

• Manage the vulnerability lifecycle (identification, assessment, prioritization, remediation tracking, follow-up, and verification) across on-premises and cloud environments

• Coordinate and review remediation efforts across multiple teams

• Report on task progress, identified vulnerabilities, high-risk assets, risk exposure, and other relevant security metrics/KPIs to stakeholders

• Interact with IT infrastructure, development, cloud operations, SOC, compliance officers, and external vendors

• Design, orchestrate, and deploy infrastructure and services to improve availability, scalability, and efficiency

• Write technical documentation to communicate solutions to engineers and users

• Solve problems related to mission-critical services, with a focus on automation to prevent recurrence

Technical requirements

• OS Administration: deep expertise in Linux, Windows, and VMware ESXi

• Programming: advanced scripting for automation (Python, Bash), data parsing, and API interaction

• Network Security: strong knowledge of TCP/IP, firewalls, VPNs, and network protocols

• Cloud Infrastructure: experience using and securing AWS and Azure

• Tools: enterprise vulnerability scanners (Rapid7 Nexpose, Nessus), SIEM platforms (Splunk), and ticketing systems (ServiceNow, Jira)

• Ability to adapt to fast-changing technologies: hybrid cloud environments, containerized applications (Docker, Kubernetes), DevSecOps pipelines, and emerging attack vectors

• Familiarity with message broker applications (Apache Kafka, AWS SQS, Google Pub/Sub, RabbitMQ)

• Knowledge of cybersecurity and cyber intelligence domains

• Experience implementing workflows using APIs between technologies

• Desirable: additional programming experience (Python, Java, GoLang, or Rust)

Education & languages

• Bachelor's degree or higher.

• English proficiency at C1 level (required)

• Knowledge of French or other EU languages considered an asset

Soft skills

• Ability to integrate and work efficiently in an international/multicultural environment

• Capacity to work on multiple large projects simultaneously

• Rapid self-starting capability

• Ability to build trusting relationships with counterparts in partner organizations

• Excellent team player

• High degree of discretion and integrity

Location

• Brussels, Belgium (On-site)