IT Security Officer - European Commission (FGIV, Brussels)
About this position
The summary below is published by European Commission on the official vacancy notice. Our own analysis — salary realism, comparable openings, career trajectory, language profile — follows further down the page.
MAKE A DIFFERENCE - JOIN THE EUROPEAN COMMISSION
Do you want to help shape the future of the European Union? Make the planet greener, promote a fairer society, or support businesses and innovation across the EU? Then come and work for the European Commission where you can really make a difference!
Commission staff are a diverse group of people, who are motivated to help make Europe – and the world – a better place. They come from the 27 Member States of the European Union. Different nationalities, backgrounds, languages and cultures make the Commission a vibrant and inclusive place to work.
WE OFFER GREAT JOBS AND GREAT WORKING CONDITIONS:
• Interesting and challenging positions with plenty of opportunities for training and acquiring new skills and competencies throughout your whole career
• Opportunities to try several areas of move between different policy your career
• A package of flexible working conditions including the possibility of teleworking – we care about your work-life balance
• A competitive financial package, including comprehensive healthcare, accident and pension schemes
• A multilingual, multicultural workplace where personal and career development are strongly promoted
• Multilingual schools for your children
We recruit from a wide range of backgrounds and actively promote diversity and inclusion:
We do not only recruit political scientists and lawyers but are also looking for all kinds of profiles, including scientists, linguists, IT experts, data analysts and economists, as well as drivers and engineers.
We are committed to equal opportunities and to fostering a rich, diverse and inclusive working environment. We aim for our workforce to be representative of European society and strongly welcome applications from all qualified candidates. We actively seek to create a workplace where each staff member feels valued and respected, can give their best and can develop to their full potential. (Reference: Call for interest EC/2026/DIGIT/431176)
To promote diversity and establish a geographically balanced pool of candidates, we strongly encourage applicants from Member States which are currently underrepresented in the European Commission workforce to apply. These Member States are currently Austria, Cyprus, the Czech Republic, Denmark, the Netherlands, Estonia, Finland, Germany, Ireland, Luxembourg, Malta, Poland, Portugal, Slovakia and Sweden 1. Recruitment will however remain strictly based on the merits of all applicants and no positions will be reserved for nationals of any specific Member State.
STAFF RECRUITED ON CONTRACTS
In addition to permanent officials, the European Commission offers non-permanent positions. There are two categories of non-permanent staff:
> •
temporary agents are recruited to fill vacant positions for a set amount of time or
to perform highly specialised tasks.
> •
contract agents may provide additional capacity in specialised fields where an
insufficient number of officials is available or carry out a number of administrative or manual tasks. They are generally recruited for fixed-term contracts (maximum 6 years in any EU Institution), but in some cases they can be offered contracts for an indefinite duration (in offices, agencies, delegations or representations).
For more information on different staff categories
> 1Please note that the list of underrepresented Member States may be subject to future amendment based on potential data changes over time.
(Reference: Call for interest EC/2026/DIGIT/431176)
# IT Security Officer -
# Vulnerability Assessment and Automation Specialist
# in DG DIGIT of the European Commission
Job title: IT Security Officer – Vulnerability Assessment and Automation Specialist
Domain: Information and Communication Technologies
Where : DIGIT.CERT-EU, Brussels
Function Group : FG IV
Contract Type : 3b
Express your interest until: 15.09.2026 - 12.00 (noon, Brussels time)
WE ARE
DIGIT-Digital Services is the Directorate whose aim is to deliver digital services to enable EU policies and to support the Commission’s internal administration. CERT-EU is the Cybersecurity Service for the European Union institutions, bodies, offices and agencies (Union entities). CERT-EU is administratively attached to DIGIT.
Established in 2011 to shore up the ICT security for the Union entities, we have been steadily expanding our IT security operations over the years and currently serve over 90 such entities spread across the Continent and beyond.
From our base in Brussels, we work with a range of peers, partners and researchers from all over the world to ensure we maintain our technological edge and have access to the best-in-class expertise.
WE PROPOSE
CERT-EU is seeking to hire a driven, methodical Vulnerability Assessment and Automation Specialist to join its Offensive Security Team. The primary purpose of this role is to provide cybersecurity services to more than 90 European Union institutions, bodies, offices and agencies.
The successful candidate will help harden and scale our continuous surface monitoring services and actively contribute to our vulnerability assessment and management workflows. Beyond discovery and triage, the successful candidate will automate collection and analysis, integrate tooling into CI/CD pipelines, and deliver actionable metrics that advance CERT-EU’s data-centric initiative. Hands-on experience in vulnerability assessment and a passion for turning raw scan data into clear, defensible insight are essential. (Reference: Call for interest EC/2026/DIGIT/431176)
The main activities of the selected candidate will include, but are not limited to:
• Vulnerability assessment and management
• Develop automation and integration for vulnerability scanning and discovery
• Data analysis and reporting
In addition to the main duties, the selected candidate will participate in the general set of tasks executed by the Offensive Security team, will be involved in projects aiming at delivering the related services and will participate in the definition, implementation and delivery of such projects.
WE LOOK FOR
The ideal candidate must possess at least three years of relevant experience and possess a
university-issued diploma or equivalent.
We are looking for a candidate who will demonstrate some of the following required skills and characteristics:
- Experience in service delivery.
- Experience in external attack surface monitoring.
- Experience in collecting and analysing high volumes of data and with related tools (e.g., Splunk).
- Familiarity with well-known security hardening standards (e.g., CIS Benchmarks).
- Excellent knowledge of the main GNU/Linux operating system distributions.
- Very good command of computer networking concepts.
The ideal candidate should also demonstrate the following required skills and characteristics:
- Hands-on experience in vulnerability assessment and management.
- Hands-on experience in developing automation and integration solutions.
- Excellent programming skills in Python, Go or similar languages.
- Strong analytical and problem-solving skills, including the ability to process large amount of information quickly.
- Ability to establish and maintain effective working relations with co-workers in an international and multidisciplinary work environment.
- Excellent communication skills in English, both orally and in writing.
- A focus on constant learning and improvement of technical and personal skills.
- The ability to adjust to a wide range of IT technologies and become proficient in new ones swiftly.
The candidate must hold a security clearance at EU SECRET level or be in a position to be security cleared. (Reference: Call for interest EC/2026/DIGIT/431176)
HOW TO EXPRESS YOUR INTEREST?
With a view to guaranteeing equal access to all, the Commission recruits from an open database of spontaneous applications. The present call for interests aims at helping the recruiters to identify potentially interested candidates within this database.
In practice, to express your interest, please follow the subsequent two steps:
1. If you are not registered yet in the open EPSO database, please do so at the following address: CAST Permanent . Please select under selection procedures for contract agent the
CAST permanent profile that best suits your education and experience.
2. You should send your documents in a single pdf in the following order:
1. your CV 2. completed application form. Please send these documents by the publication deadline to secretariat@cert.europa.eu
indicating the call for interest reference EC/2026/DIGIT/431176 in the subject.
No applications will be accepted after the publication deadline. (Reference: Call for interest EC/2026/DIGIT/431176)
## ANNEX
## 1. Selection
Am I eligible to apply?
You must meet the following eligibility criteria when you validate your application :
Our rules provide that you can only be recruited as a contract agent at the European Commission if you:
General criteria:
• Are a citizen of a Member State of the EU and enjoy full rights as a citizen;
• Have fulfilled any obligations imposed by applicable laws concerning military service;
• Are physically fit to perform the duties linked to the position;
• Produce the appropriate character references as to suitability for the performance of the duties.
• Have passed an EPSO CAST in the relevant Function Group for this position. At the stage of the application, it is sufficient to be registered in the EPSO CAST data base.
Qualifications:
(a) Have a level of education which corresponds to completed university studies of at least three years attested by a diploma.
Only qualifications issued or recognised as equivalent by EU Member State authorities (e.g. by the Ministry of Education) will be accepted.
Languages:
• have a thorough knowledge (minimum
Position details
- Reference
- EC/2026/DIGIT/431176
- Directorate-General
- DIGIT – Digital Services
- Vacancy Notice
- Download PDF
- Last Verified
- 23 July 2026
Position overview
This is the official EU Careers listing for IT Security Officer at European Commission based in Brussels at the FGIV grade level (Contract Agent). The vacancy reference is EC/2026/DIGIT/431176. It is hosted by DIGIT – Digital Services, the Directorate-General responsible for this policy area. The role falls under the Information Technology domain.
MAKE A DIFFERENCE - JOIN THE EUROPEAN COMMISSION
Do you want to help shape the future of the European Union? Make the planet greener, promote a fairer society, or support businesses and innovation across the EU? Then come and work for the European Commission where you can really make a difference!
Commission staff are a diverse group of people, who are motivated to help make Europe – and the world – a better place. They come from the 27 Member States of the European Union. Different nationalities, backgrounds, languages and cultures make the Commission a vibrant and inclusive place to work.
WE OFFER GREAT JOBS AND GREAT WORKING CONDITIONS:
• Interesting and challenging positions with plenty of opportunities for training and acquiring new skills and competencies throughout your whole career
• Opportunities to try several areas of move between different policy your career
• A package of flexible working conditions including the possibility of teleworking – we care about your work-life balance
• A competitive financial package, including comprehensive healthcare, accident and pension schemes
• A multilingual, multicultural workplace where personal and career development are strongly promoted
• Multilingual schools for your children
We recruit from a wide range of backgrounds and actively promote diversity and inclusion:
We do not only recruit political scientists and lawyers but are also looking for all kinds of profiles, including scientists, linguists, IT experts, data analysts and economists, as well as drivers and engineers.
We are committed to equal opportunities and to fostering a rich, diverse and inclusive working environment. We aim for our workforce to be representative of European society and strongly welcome applications from all qualified candidates. We actively seek to create a workplace where each staff member feels valued and respected, can give their best and can develop to their full potential. (Reference: Call for interest EC/2026/DIGIT/431176)
To promote diversity and establish a geographically balanced pool of candidates, we strongly encourage applicants from Member States which are currently underrepresented in the European Commission workforce to apply. These Member States are currently Austria, Cyprus, the Czech Republic, Denmark, the Netherlands, Estonia, Finland, Germany, Ireland, Luxembourg, Malta, Poland, Portugal, Slovakia and Sweden 1. Recruitment will however remain strictly based on the merits of all applicants and no positions will be reserved for nationals of any specific Member State.
STAFF RECRUITED ON CONTRACTS
In addition to permanent officials, the European Commission offers non-permanent positions. There are two categories of non-permanent staff:
> •
temporary agents are recruited to fill vacant positions for a set amount of time or
to perform highly specialised tasks.
> •
contract agents may provide additional capacity in specialised fields where an
insufficient number of officials is available or carry out a number of administrative or manual tasks. They are generally recruited for fixed-term contracts (maximum 6 years in any EU Institution), but in some cases they can be offered contracts for an indefinite duration (in offices, agencies, delegations or representations).
For more information on different staff categories
> 1Please note that the list of underrepresented Member States may be subject to future amendment based on potential data changes over time.
(Reference: Call for interest EC/2026/DIGIT/431176)
# IT Security Officer -
# Vulnerability Assessment and Automation Specialist
# in DG DIGIT of the European Commission
Job title: IT Security Officer – Vulnerability Assessment and Automation Specialist
Domain: Information and Communication Technologies
Where : DIGIT.CERT-EU, Brussels
Function Group : FG IV
Contract Type : 3b
Express your interest until: 15.09.2026 - 12.00 (noon, Brussels time)
WE ARE
DIGIT-Digital Services is the Directorate whose aim is to deliver digital services to enable EU policies and to support the Commission’s internal administration. CERT-EU is the Cybersecurity Service for the European Union institutions, bodies, offices and agencies (Union entities). CERT-EU is administratively attached to DIGIT.
Established in 2011 to shore up the ICT security for the Union entities, we have been steadily expanding our IT security operations over the years and currently serve over 90 such entities spread across the Continent and beyond.
From our base in Brussels, we work with a range of peers, partners and researchers from all over the world to ensure we maintain our technological edge and have access to the best-in-class expertise.
WE PROPOSE
CERT-EU is seeking to hire a driven, methodical Vulnerability Assessment and Automation Specialist to join its Offensive Security Team. The primary purpose of this role is to provide cybersecurity services to more than 90 European Union institutions, bodies, offices and agencies.
The successful candidate will help harden and scale our continuous surface monitoring services and actively contribute to our vulnerability assessment and management workflows. Beyond discovery and triage, the successful candidate will automate collection and analysis, integrate tooling into CI/CD pipelines, and deliver actionable metrics that advance CERT-EU’s data-centric initiative. Hands-on experience in vulnerability assessment and a passion for turning raw scan data into clear, defensible insight are essential. (Reference: Call for interest EC/2026/DIGIT/431176)
The main activities of the selected candidate will include, but are not limited to:
• Vulnerability assessment and management
• Develop automation and integration for vulnerability scanning and discovery
• Data analysis and reporting
In addition to the main duties, the selected candidate will participate in the general set of tasks executed by the Offensive Security team, will be involved in projects aiming at delivering the related services and will participate in the definition, implementation and delivery of such projects.
WE LOOK FOR
The ideal candidate must possess at least three years of relevant experience and possess a
university-issued diploma or equivalent.
We are looking for a candidate who will demonstrate some of the following required skills and characteristics:
- Experience in service delivery.
- Experience in external attack surface monitoring.
- Experience in collecting and analysing high volumes of data and with related tools (e.g., Splunk).
- Familiarity with well-known security hardening standards (e.g., CIS Benchmarks).
- Excellent knowledge of the main GNU/Linux operating system distributions.
- Very good command of computer networking concepts.
The ideal candidate should also demonstrate the following required skills and characteristics:
- Hands-on experience in vulnerability assessment and management.
- Hands-on experience in developing automation and integration solutions.
- Excellent programming skills in Python, Go or similar languages.
- Strong analytical and problem-solving skills, including the ability to process large amount of information quickly.
- Ability to establish and maintain effective working relations with co-workers in an international and multidisciplinary work environment.
- Excellent communication skills in English, both orally and in writing.
- A focus on constant learning and improvement of technical and personal skills.
- The ability to adjust to a wide range of IT technologies and become proficient in new ones swiftly.
The candidate must hold a security clearance at EU SECRET level or be in a position to be security cleared. (Reference: Call for interest EC/2026/DIGIT/431176)
HOW TO EXPRESS YOUR INTEREST?
With a view to guaranteeing equal access to all, the Commission recruits from an open database of spontaneous applications. The present call for interests aims at helping the recruiters to identify potentially interested candidates within this database.
In practice, to express your interest, please follow the subsequent two steps:
1. If you are not registered yet in the open EPSO database, please do so at the following address: CAST Permanent . Please select under selection procedures for contract agent the
CAST permanent profile that best suits your education and experience.
2. You should send your documents in a single pdf in the following order:
1. your CV 2. completed application form. Please send these documents by the publication deadline to secretariat@cert.europa.eu
indicating the call for interest reference EC/2026/DIGIT/431176 in the subject.
No applications will be accepted after the publication deadline. (Reference: Call for interest EC/2026/DIGIT/431176)
## ANNEX
## 1. Selection
Am I eligible to apply?
You must meet the following eligibility criteria when you validate your application :
Our rules provide that you can only be recruited as a contract agent at the European Commission if you:
General criteria:
• Are a citizen of a Member State of the EU and enjoy full rights as a citizen;
• Have fulfilled any obligations imposed by applicable laws concerning military service;
• Are physically fit to perform the duties linked to the position;
• Produce the appropriate character references as to suitability for the performance of the duties.
• Have passed an EPSO CAST in the relevant Function Group for this position. At the stage of the application, it is sufficient to be registered in the EPSO CAST data base.
Qualifications:
(a) Have a level of education which corresponds to completed university studies of at least three years attested by a diploma.
Only qualifications issued or recognised as equivalent by EU Member State authorities (e.g. by the Ministry of Education) will be accepted.
Languages:
• have a thorough knowledge (minimum
Salary at this grade
Basic monthly salary at FGIV runs from €4,449 (step 1) to €5,034 (top step), giving an annual range of roughly €53,388 to €60,408 before tax and allowances. Steps increase automatically every two years; the figures here are taken from the salary grid in the EU Staff Regulations.
Eligible staff posted away from their country of nationality also receive an expatriation allowance worth 16% of basic salary (around €712 per month at step 1 of FGIV) together with household, dependent-child, and education allowances where applicable. Take-home pay is then adjusted by the country correction coefficient for Brussels. For a worked example see our correction coefficients guide and the EU salaries overview.
Application timeline
This vacancy was first listed on 21 March 2026, 123 days ago.
The application deadline is 15 September 2026, 53 days from today. Late applications are not accepted, so submit through the official EU Careers portal well in advance.
Last verified against the EU Careers feed on 23 July 2026.
Where to learn more
For full responsibilities, requirements, and career progression at FGIV see our FGIV grade page; for headcount, mission, and other open vacancies at European Commission see the European Commission institution page; for the cost of living, correction coefficient, and other postings in Brussels see our Brussels location page; for related vacancies in the Information Technology field browse our Information Technology domain page.
New to EU careers? Our beginner's guide walks through entry routes, EPSO competitions, and what to prepare. For application logistics see application tips and EPSO competitions.
Net pay at this grade
Comparable recent roles
- Senior Agent – ICT Application System Administrator at Europol (published 2026-07-22, closed 2026-08-16)
- Economic Analyst at European Commission (ECFIN - Economic and Financial Affairs) (published 2026-07-22, closed 2026-08-14)
- Policy Officer at European Commission (JUST - Justice and Consumers) (published 2026-07-20, closed 2026-07-31)
- Policy Officer - Sustainable finance and innovative financing solutions at European Commission (INTPA - International Partnerships) (published 2026-07-17, closed 2026-09-10)
- Project Manager - Procurement at European Commission (FPI - Foreign Policy Instruments) (published 2026-07-17, closed 2026-08-18)
Career trajectory
Language profile
Application cadence
Visit the official European Commission website
Source: This job listing was sourced from the official EU Careers portal (EPSO). First published: . Salary estimate based on EU Staff Regulations.