Security Engineer

Il y a 2 jours

Brussel, Brussel-Hoofdstad, Belgique Huxley Temps plein 45 000 € - 70 000 €/an

Security Engineer - Cyber Security Specialist / Analyst (Junior/Medior)

Our client, a leading player in the banking sector in Belgium, is looking for a junior/medior Security Engineer to strengthen their cyber defence capabilities. In this role, you will focus on preventive security solutions across a wide spectrum of IT domains, helping protect critical applications, infrastructure and business processes against evolving cyber threats.

Profile

  • 2 to 5 years of experience in an IT technical role with a focus on cybersecurity and threat detection.
  • Proven experience working in a SOC, threat detection team or similar security operations environment.
  • Fluent in English; Dutch is a strong plus.

Key Skills & Responsibilities

  • Risk & Vulnerability Analysis - Conduct in-depth risk assessments, patch and vulnerability management, and identify weaknesses across systems and applications.
  • Web Application Security - Perform security assessments on web applications and APIs, detecting issues such as SQL Injection, XSS, CSRF and Clickjacking.
  • Secure Coding Advisory - Advise development teams on secure coding practices and follow up on implementation of security policies and best practices.
  • Threat Detection & Log Analysis - Analyze log data to uncover anomalies, investigate incidents, and contribute to forensic analysis and incident response plans.
  • Technical Expertise - Use scripting (Python, Bash), front-end and back-end skills (HTML, JavaScript, CSS), browser DevTools, RESTful APIs and SQL to support security analysis.
  • Cloud & Tooling Knowledge - Apply familiarity with Azure, AWS, GCP and optionally SCA, SAST, DAST, VMDR tooling to strengthen preventive security.
  • Analytical & Ownership Mindset - Demonstrate strong analytical skills, sound decision making, and take ownership of issues from detection through resolution.
  • Collaboration & Communication - Work closely with cross-department stakeholders, communicate clearly with technical and non-technical audiences, and act as Security Champion for specific technologies.