Security Engineer

5 hours ago

Brussels, BelgiumSenior

Responsibilities

Promote secure-by-design practices and conduct threat modeling for applications, platforms, major changes, and AI/LLM-enabled services.
Integrate SAST, DAST, SCA, container, and IaC security checks into CI/CD pipelines where appropriate.
Own application vulnerability management, including severity classification, remediation SLAs, tracking, and resolution.
Triage and contextualize automated security findings, perform secure code reviews, and validate AI-generated code security when needed.
Maintain and evolve guidance based on OWASP Top 10, OWASP LLM Top 10, CWE mitigations, and Elia security standards.
Advise on security architecture, API gateways, secrets management, OAuth 2.0/OIDC, and zero-trust network segmentation.
Support SOC and IT Security teams, application-security initiatives, security incidents, penetration-test scoping, and validation of findings.

Master’s degree in IT, management, or engineering, or equivalent experience.
At least 5 years of combined experience in application security and/or security operations.
At least two programming or scripting languages such as Python, Bash, Java, .NET, or Go.
Deep knowledge of OWASP ASVS, OWASP WSTG, OWASP SAMM, and OWASP LLM Top 10.
Practical experience integrating security tools into CI/CD pipelines and working with Agile/SAFe models.
Knowledge of application security, secure software development lifecycles, SAST/DAST, threat modeling, code review, API security, and AI/LLM application security.
Ability to collaborate with software engineering and governance/compliance teams and communicate risks to leadership.
Fluent English; French, Dutch, and/or German is a plus.
Preferred qualifications include OSEP, GPEN, AWS Security Specialty, Azure Security Specialty, GXPN, CISM, or CISSP certifications; SIEM and detection-rule experience; MITRE ATLAS knowledge; and OT/ICS, energy-sector, or regulated-environment experience.

Competitive salary package with representation allowance, year-end bonus, holiday allowance, meal vouchers of €10 per working day, eco-vouchers, sport and culture vouchers, and individual and collective performance bonuses.
Group, hospitalization, outpatient family, and private-accident insurance.
20 vacation days, compensatory rest days, local holidays, cadre days after one year, and seniority days.
Year-end, birth, and marriage benefits plus partial reimbursement for glasses, dental prostheses, and similar expenses.
iPhone with private-use subscription, internet-subscription reimbursement, and laptop.
30% discount on gas and electricity bills.
Company car and public-transport subscription or mobility budget.
Opportunity to purchase Elia shares at a 16.66% discount.
Primary workplace in Brussels near Brussels-Central station with telework.