Application Security Consultant

We are seeking an Application Security Engineer to join our Application Security & Vulnerability Management team.

Key Responsibilities:

Major Tasks:

• Manage requests from squads for setting up application security tools via Jira tickets.
• Conduct code reviews using security tools (SAST).
• Support IT development squads in secure development/SecDevOps adoption.
• Prepare and deliver training sessions on security topics.
• Coach squads on using security tools.
• Manage technical infrastructure for automatic code reviews and open-source library evaluations.
• Maintain security and compliance policies.
• Follow up and report on evaluation execution.
• Keep development guidelines up-to-date.
• Review defects and vulnerabilities.
• Lead projects/changes as an application security expert.

Minor Tasks:

• Manage and report on security issues.
• Support IT developers in addressing security risks and incidents.
• Provide input for new security measures.
• Occasionally write scripts for internal tooling.

Requirements:

Language Skills:

• English: Very good knowledge (absolute must).
• Dutch/French: Desirable but not mandatory.

Education:

• Master’s in IT or Engineering (for Junior) or equivalent experience for more experienced profiles.

Telework:

• 50% on-site, 50% homeworking.

Experience/Knowledge:

• Experience in application development and up-to-date with current development trends.
• Strong interest in application security with ambition to become an expert in 3-5 years.
• Understanding of Software Development Lifecycle in Agile and DevOps environments.
• Knowledge of security checks at different stages of the software development lifecycle.

Technical Skills:

• Familiar with recent developments in software development (Jenkins, Gitlab, Maven, Docker, etc.).
• Expertise in application security.
• Interest and initial experience in penetration testing.
• Knowledge of network security.
• Understanding of mobile application development and testing challenges.

Business Experience:

• Experience in high-security environments (banking, pharma, aviation, etc.) is a plus.