Information Security Engineer

Overview

We are looking (in Leuven) for a Medior Cyber Security Specialist / Analyst with 2 to 5 years of experience in cybersecurity, vulnerability management and security analysis.

This is not a pure SOC role and not a pure GRC role. The focus is on:

• Application Security
• Vulnerability Management
• Web Security
• Risk Analysis
• Security Assessments
• Threat Detection
• Advising development teams on secure coding practices

The successful candidate will help protect our applications and infrastructure against cyber threats through proactive security assessments, vulnerability analysis and continuous security improvements.

Main Responsibilities

Security Analysis & Risk Management

• Perform security risk assessments.
• Conduct vulnerability assessments and analyses.
• Identify security weaknesses and propose remediation measures.
• Investigate security incidents and perform root cause analysis.
• Analyze log data to detect anomalies and potential threats.

Application Security

• Perform security assessments of web applications and APIs.
• Identify vulnerabilities including:
• SQL Injection
• Cross-Site Scripting (XSS)
• Cross-Site Request Forgery (CSRF)
• Clickjacking
• Advise development teams on secure coding practices.
• Support the implementation of security best practices throughout the software development lifecycle.

Vulnerability Management

• Support Patch & Vulnerability Management processes.
• Follow up on security findings and remediation plans.
• Improve security tooling and monitoring capabilities.

Collaboration & Stakeholder Management

• Work closely with developers, infrastructure teams and security stakeholders.
• Participate in Agile environments.
• Provide security expertise across multiple IT domains.

Required Technical Skills

Cybersecurity

• Information Security
• Cyber Risk Management
• Vulnerability Management
• Incident Management
• Root Cause Analysis
• Threat Detection
• Security Monitoring

Application Security

• OWASP Top 10
• Web Security
• API Security
• Secure Coding Principles
• Security Testing

Development Knowledge

• HTML
• JavaScript
• CSS
• SQL
• REST APIs

Scripting & Automation

• Python
• Bash

Cloud & Infrastructure

• Azure
• AWS
• GCP
• Log Analysis
• Network Security Fundamentals

Nice-to-Have

• SAST
• DAST
• SCA
• VMDR
• Security Champion experience
• Security certifications:
• CEH
• Security+
• OSCP
• CISSP

Required Soft Skills

• Strong analytical mindset
• Decision-making ability
• Taking ownership
• Proactive attitude
• Strong communication skills
• Team player
• Attention to detail
• Process and quality improvement mindset
• Ability to collaborate with technical and non-technical stakeholders

Required Languages

• Dutch
• English