MISP Senior Data Engineer

NCIA (NATO Communications and Information Agency) is looking for a MISP Engineer to design, build, and maintain cyber-threat information pipelines and support NATO's threat-sharing communities.

Primary duties

• Design, build, and maintain pipelines that ingest cyber-threat information from multiple sources.
• Develop and maintain Python scripts integrating MISP with NATO systems such as SIEM and IDS platforms.
• Define, document, and implement information-dissemination rules.
• Support threat-information process management.
• Normalize heterogeneous threat feeds into a consistent data schema.
• Maintain data quality through deduplication, confidence scoring, indicator lifecycle management, provenance tracking, and filtering of low-quality sources.
• Integrate established cyber-threat information standards.
• Document commonly used MISP taxonomies, galaxies, and data-entry best practices.
• Serve as a subject-matter expert for NATO MISP communities.
• Advise users on data curation and dissemination options, including their benefits and limitations.
• Support users of NATO-managed MISP instances and provide regular feedback, including daily feedback during exercises.
• Lead teams of MISP Operators during exercises, overseeing information flow, quality control, and user management.
• Plan, prepare, and deliver online MISP training.
• Help prepare training packages and validate that training objectives have been achieved.