Security Engineer,

ppExcited to work for a key Belgian player in the energy landscape? /p pThe Belgian and European energy landscape is in full swing. Did you know that Elia Belgium plays a crucial role in this? As part of Elia Group, a European transmission system operator, Elia Belgium ensures the reliability and sustainability of the electricity supply in our country. /p pSide‑side with your talented colleagues, you will play a part in building a sustainable, green and reliable energy infrastructure that stimulates economic growth and reduces our ecological footprint. /p pOnly together can we make the biggest impact possible We believe in the power of diversity we are convinced that an inclusive and diverse work environment leads to more innovation, creativity and better results. /p h3Security Engineer /h3 pRequisition ID 11329 /p pPosting Start Date 12/08/2026 /p h3Function /h3 pWe are looking for an experienced bSecurity Engineer /b – bSecOps Application Security /b to strengthen our Group Engineering team in Brussels. This is a senior security engineering role that merges Security Operations depth, Application Security engineering expertise and Security Architecture and Governance experience. You will be a trusted security partner to our application engineering, platform, and OT/IT operations teams, embedding security throughout the entire Software Development Lifecycle. /p pAs Elia Group embeds AI into engineering products and faces increasingly AI-powered adversaries, you will also help secure both the AI systems we build and detect the AI‑accelerated attacks we face. /p pAs Security Engineer, you will /p ulliChampion a Secure‑by‑Design culture and run threat modelling for applications, platforms, AI/LLM‑infused services, and major changes. /liliIntegrate security checks such as SAST, DAST, SCA, container scanning and IaC security checks into CI/CD pipelines whenever needed. /liliOwn the vulnerability management lifecycle for application‑layer findings, including severity classification, remediation SLAs and tracking through to closure. /liliTriage and contextualise findings from automated tools to eliminate noise and prioritise exploitable risk. /liliProvide hands‑on secure code review and security validation of AI‑generated code where requested. /liliMaintain and evolve security guidelines covering OWASP Top 10, OWASP LLM Top 10 and CWE mitigations, tailored to Elia Engineering and IT Security standards. /liliDrive risk‑based prioritisation for security‑related issues picked up during SDLC activities and security monitoring activities. /liliAct as an interface/internal consultant between the IT security teams and the Engineering teams. /liliAdvise on security architecture, including API gateway hardening, secrets management, OAuth 2.0/OIDC implementations and zero‑trust network segmentation. /liliBe a point of contact for the SOC and IT Security teams, providing application/engineering security support where needed. /liliSupport security incidents involving application‑layer attacks and translate findings into hardening tasks for engineering teams. /liliSupport security initiatives in the organisation, including input into pentesting scope and validating findings with engineering teams. /li /ul h3Your Profile /h3 ulliMaster’s degree in IT, Business Administration, Engineering, or relevant equivalent experience /liliMinimum of 5 years of combined experience in application security and/or security operations roles, preferably with at least 2 years in a KRITIS, financial services, or similarly regulated environment. /liliDeep familiarity with OWASP ASVS, WSTG, SAMM and OWASP LLM Top 10 frameworks. /liliProficiency in at least two scripting/programming languages such as Python, Bash, Java, .
NET, Go or similar. /liliPractical experience integrating security tooling into CI/CD pipelines and working within Agile/SAFe delivery models. /liliKnowledge of application security, secure SDLC, SAST/DAST tooling, threat modelling, code review, API security and AI/LLM application security. /liliExperience working with both software engineering teams and governance/compliance functions. /liliExperience using risk frameworks as a means to drive action. /liliStrong communication skills, including executive risk reporting, developer coaching and stakeholder management. /liliYou are fluent in English. Knowledge of Dutch, French and/or German is a plus. /li /ul h3Nice to have /h3 ulliCertifications such as OSEP, GPEN, AWS/Azure Security Specialty, GXPN, CISM or CISSP. /liliExperience with SIEM platforms, writing detection logic and familiarity with MITRE ATLAS for AI/ML threat modelling. /liliFamiliarity with OT/ICS security or energy sector technology stacks. /liliWorking proficiency in German or French; English is the working language of IT functions. /li /ul h3Offer /h3 ulliSalary a competitive salary package, allowance for representation expenses, year‑end bonus, double vacation pay, meal vouchers (€10 per working day), eco‑vouchers