Security Auditor

The company you’ll be joining is a fast-growing B2B product and technology organisation based in Brussels, building secure, data-driven solutions that help businesses operate more efficiently and make better decisions.

Responsibilities

• Conduct application security audits, code reviews and penetration tests across web, API, mobile and cloud-based applications.
• Identify, assess and prioritise vulnerabilities (OWASP Top 10, CWE), and give development teams clear, practical remediation guidance.
• Embed security into the SDLC and CI/CD pipelines through SAST, DAST, SCA and secrets-scanning tools.
• Perform threat modelling and security architecture reviews for new products and features.
• Support compliance and audit readiness against standards such as ISO 27001, SOC 2 and GDPR, and report findings and risk clearly to technical and business stakeholders.

Your Profile

• 2-5 years of experience in application security, security auditing, penetration testing or a similar security-focused engineering role.
• Strong knowledge of secure coding practices and common vulnerabilities (OWASP Top 10, API security, authentication and authorisation flaws).
• Hands‑on experience with security testing tools such as Burp Suite, OWASP ZAP, SonarQube, Snyk, Checkmarx or similar.
• Practical experience with Azure, AWS or GCP and cloud security best practices.
• Familiarity with Docker, Git and CI/CD, and ideally Kubernetes and infrastructure-as-code security.
• Comfortable working in a product‑led, agile environment and collaborating with software engineers, product teams and business stakeholders.
• Relevant certifications such as OSCP, CEH, GWAPT, CISSP or CSSLP are a plus.
• Experience with B2B products, SaaS or regulated environments is a plus.
• Strong communication skills and a collaborative, pragmatic mindset.

What’s on Offer

• Salary of up to €6,000 gross per month, depending on experience.
• Company car or mobility budget.
• Hybrid working model with a modern office environment in Mechelen.
• Meal vouchers, group insurance and hospitalisation insurance.
• Ongoing technical training and certification support, including security certifications.
• Clear career progression towards Senior Application Security Engineer, Security Architect or Head of Security.
• The chance to work with modern security tooling and cloud technologies across Azure, AWS and GCP.
• A direct impact on the security posture of a growing B2B technology product.
• A collaborative, technically ambitious environment where security is part of the product and business strategy.