Application Architect with Security Focus

What you will do

You will lead the launch of a secure development programme within a Belgian public-sector organisation, embedding security into the software development lifecycle in response to the NIS2 directive and the Belgian CyFun framework.

Your work will focus on implementing the OWASP Software Assurance Maturity Model (SAMM) to help development teams integrate secure development into their daily activities. You will establish the foundations of a SecDevOps practice, emphasising continuous security practices throughout the development process.

Key responsibilities include:

• Analysing and mapping the changes needed in the development process, documenting them clearly for both technical and non-technical audiences
• Setting up application security dashboards and defining routines to continuously improve development security
• Guiding existing teams in incorporating secure development into their daily work, raising overall security maturity
• Acting as project lead: participating in follow-up meetings, reporting on planning and progress, and documenting chosen methodologies and their implementation
• Creating a standard directive describing how to apply secure development concretely, both for internal projects and external suppliers
• Developing a security matrix to assess external projects
• Designing and delivering training on secure development to the teams involved
• Reviewing and commenting on technical designs, providing well-founded advice on infrastructure, software and working methodologies

What we are looking for

Essential experience and skills:

• Demonstrable experience in similar projects in an environment of comparable size
• At least 3 years of experience reviewing security architectures
• At least 3 years of experience setting up SCA, SAST and DAST tooling in a CI/CD pipeline
• At least 3 years of experience in DevSecOps
• Knowledge of project management
• Agile and Lean Software Development
• Security frameworks (CyFun, SAMM and similar)
• Quality assurance and testing, including test-driven development
• Results-oriented, client-focused and a strong sense of responsibility
• Planning and organisational skills, with the ability to steer, monitor and adjust
• Negotiation skills and relationship management
• Ability to build, lead and supervise a team

Additional assets:

• Knowledge of ITIL
• Knowledge of Java
• Knowledge of Angular
• Knowledge of Oracle
• Knowledge of web services and service bus technologies
• Familiarity with the SAMM framework
• Familiarity with the CyFun framework

You are an experienced application architect with solid security knowledge, or a security architect with strong application development expertise. You can communicate effectively with both highly technical profiles and less specialised colleagues, and you can promote security and development concepts convincingly.

The setting

This assignment runs from July 2027 to the end of December 2027, with 880 hours planned during the second semester. An optional extension is foreseen for 2028, with a maximum of 1760 hours.

The role is based in Brussels and follows a hybrid working model.

Working languages are Dutch or French (active knowledge required), with English as an asset.

You can join us for this assignment as a freelancer or as an employee of HumanInTech. Same role, same team. If you join as an employee, your employment continues beyond this assignment. When it ends, you'll work together to find your next assignment.

Location: Brussels, hybrid

Employer / contracting party: HumanInTech

Applications close (Brussels time): October 2, 2026 at 2:00 AM

Engagement: Freelance or employed by HumanInTech

Working hours: Full-time

Experience: 6-10 years or more

Education: Bachelor's or more

Published: September 2026