Security Engineer

Cybersecurity Engineer

About the Role

• Role Type: Freelance / External Contractor
• Location: Onsite – Brussels, Belgium
• Security Clearance: EU SECRET / SECRET UE (Mandatory)

Position Overview We are seeking a Cybersecurity Engineer to join an critical infrastructure environment in Brussels. This role combines hands-on automation, vulnerability lifecycle management, system administration, and DevSecOps practices in a hybrid cloud and on-premises ecosystem. The ideal candidate will focus on automating security workflows, hardening infrastructure, managing vulnerability exposure, and integrating tools via APIs to prevent manual recurrence of security issues.

Responsibilities

• Automation & API Integration: Develop custom internal scripts (Python, Bash) to automate tasks, analyze security data, and integrate APIs across security platforms and infrastructure tools.
• Vulnerability Lifecycle Management: Oversee identification, assessment, prioritization, remediation tracking, and verification using enterprise scanners across cloud and on-prem environments.
• Infrastructure & OS Hardening: Deploy, manage, and harden server environments (Linux, Windows, VMware ESXi) and network devices (firewalls, routers, switches, VPN gateways).
• Remediation & Coordination: Work closely with IT Infrastructure, DevOps/Cloud, SOC, Compliance, and vendors to coordinate patching, configuration changes, and security updates.
• Reporting & Metrics: Prepare comprehensive vulnerability assessment reports, remediation plans, operational procedures, dashboards, and metrics (KPIs, active threat trends, ticket trends) for management and technical teams.
• Infrastructure Resiliency: Design and deploy security services to enhance the availability, scalability, latency, and efficiency of threat management systems.

Qualifications

• Education: Minimum EQF Level 5 (Post-secondary education / Associate degree) or higher.
• Security Clearance: Active EU SECRET (or national equivalent transferable to EU SECRET) is mandatory upon start.

Required Skills

• Scripting & Automation: Strong hands-on proficiency in Python and Bash for scripting, data parsing, and API interactions.
• Vulnerability Scanners & SIEM: Practical experience with enterprise scanners (Rapid7 Nexpose, Tenable Nessus) and SIEM platforms (Splunk).
• OS & Virtualization: In-depth administration skills in Linux, Windows, and VMware ESXi.
• Cloud & Modern Tech Stack: Hands-on exposure to AWS/Azure, containerized environments (Docker, Kubernetes), DevSecOps pipelines, and message brokers (Kafka, RabbitMQ, SQS).
• Network Security: Strong understanding of TCP/IP, network protocols, firewalls, and VPN gateways.
• Ticketing & Workflows: Experience with Jira and ServiceNow.

Preferred Skills

• Programming experience in Java, Go, or Rust.

Knowledge of advanced threat intelligence frameworks and emerging attack vectors.