Senior Security Engineer

We are looking for a Senior Security Engineer to help secure a large container platform and support developers in delivering secure applications. You will represent security in a multidisciplinary container operations team, with support from security specialists and access to further training.

Your role

• Secure the container platform and help developers apply security practices to their applications.
• Take a leading role in container security and advise the team on security best practices.
• Assess threats using STRIDE and help manage vulnerabilities in container images.
• Integrate security into development pipelines and work with cloud-native security tooling.
• Explain security measures to colleagues and collaborate with internal and external partners.

You have

• At least five years of experience as a Security Consultant in data, infrastructure or applications.
• Experience analysing, improving and documenting security processes.
• Experience analysing, improving and documenting security governance.
• Demonstrable expertise in a specific information security domain.
• Good knowledge of current IT risks.
• Experience implementing security solutions to mitigate IT risks.
• Dutch at C2 level.

A plus

• Ability to work independently.
• Ability to work towards a shared goal in a team.
• Ability to take initiative.
• Willingness to take responsibility.
• Ability to explain and enforce security measures with a wide range of staff.
• Ability to collaborate and build a network with internal and external partners.
• Diplomatic assertiveness in a multidisciplinary team.
• Experience with CNAPP platforms, including reporting, runtime policies and compliance checks.
• Professional experience with containerisation.
• Experience with Kubernetes.
• Experience implementing container security best practices.
• Ability to coach and advise on container security best practices.
• Experience with DevSecOps.
• Experience integrating security into CI/CD pipelines.
• Experience with SAST tools in development pipelines.
• Experience with DAST tools in development pipelines.
• Experience with GitLab CI.
• Experience detecting and managing vulnerabilities, particularly in container images, using vulnerability management solutions.
• Experience with Red Hat OpenShift, particularly version 4.
• Experience with STRIDE threat modelling.
• Experience with security management frameworks, such as ISO 27000, COBIT for Security, NIST, OWASP or CIS Controls.
• A relevant information security certification, such as CISM, CISSP or CEH.
• Experience with scripting.
• Familiarity with cloud technologies, such as AWS, Azure or GCP.
• Understanding of cloud security concerns and the advantages and disadvantages of moving to the cloud.
• A relevant cloud certification.

Working at Neurho

Founded in 1998, Neurho is a Belgian IT and business consultancy. For more than 25 years, we have been helping banks, insurers, energy companies and public institutions in Belgium and Luxembourg with their transformation projects. At Neurho, you work on varied and challenging assignments, where your expertise is recognised and your growth encouraged. On top of your salary, you enjoy many extra-legal benefits, designed to suit your role, your needs and your personal wishes.

Neurho is committed to equal opportunity and welcomes every application, regardless of age, origin, nationality, gender, social background, beliefs or disability.