Senior Security Engineer – DevSecOps

Looking for a change? New challenges?

Want to boost your career towards a(n) Senior Security Engineer – DevSecOps role?

Join our Cybersecurity team at NRB

The NRB group is currently one of the market leaders in Belgium. We offer information technology services to meet the demands of all IT needs: infrastructure & cloud, software development and consultancy & managed staffing.

WHY NRB?

We care about you

Are you interested in working in a pleasant atmosphere with the possibility of regularly working from home? Yes, that’s how it works with us

We invest in your future

Do you want to evolve within your job function or change horizons? It’s possible

THE BACKGROUND

Need for reinforcement

YOUR MISSION

As a(n) Senior Security Engineer – DevSecOps, your mission will be to develop a robust DevSecOps philosophy at NRB.

Your responsibilities will be as follows:

1. Integrate security practices into the DevOps lifecycle to ensure secure development, deployment, and operation of software.
2. Collaborate with development, operations, and security teams to develop, implement, and improve security measures.
3. Conduct security assessments and provide actionable recommendations to enhance our security posture.
4. Stay informed on the latest security trends, technologies, and best practices.
5. Implement automated security checks in CI/CD pipelines.
6. Conduct threat modeling of applications, including analyzing and assessing security risks.
7. Train and mentor other team members on DevSecOps best practices and procedures.
8. Administer, configure, and fine-tune security tools and systems to ensure an optimal security posture.
9. Monitor and ensure service continuity, intervening as necessary to restore functionality.
10. Perform log analysis, forensic investigations, and root cause analysis.

YOUR TEAM

You will be joining the Cybersecurity team, whose mission is to provide an agile and cross-functional cybersecurity service to both NRB and its customers, in order to protect them and prevent security attacks, and if any to limit their consequences as much as possible.

The team comprises 21 people (professions, job functions, experts in, …) and is part of the Cybersecurity department.

You will be coached and mentored by Lorenzo Bernardi, your direct manager. Discover his profile on LinkedIn.

OUR OFFER

1. A(n) Senior Security Engineer – DevSecOps job function: rich in responsibilities and challenges
2. A team of enthusiastic, professional colleagues in which there is an excellent atmosphere and where expertise is shared
3. Tools and infrastructure that are consistently at the forefront of innovation
4. Personalized career support to help you with your development
5. Many training opportunities and certifications
6. A company with a friendly working atmosphere which is dynamic and oriented towards innovation.
7. Fun times – a food truck, barbecue, after-work events, family day
8. Complete salary package
9. Teleworking opportunities (up to 3 days a week)

Requirements

YOUR PROFILE

1. Minimum of 5 years of experience in DevSecOps or a related field.
2. Experience integrating security practices within a DevOps environment.
3. Knowledgeable in handling various types of security incidents, including threat modeling, security automation, and application security.
4. Experience with security tools like SAST, DAST, dependency checkers, and SIEM.
5. Strong understanding of network protocols, security architecture, and cloud security (AWS, Azure, or GCP).
6. Proficiency in scripting and programming languages (e.g., Python, Shell) for automation.
7. Experience with CI/CD tools (e.g., Jenkins, GitLab CI/CD) and container orchestration (e.g., Kubernetes, Docker).
8. Strong analytical skills with the ability to quickly assess and remediate security vulnerabilities.
9. Excellent communication and interpersonal skills to work effectively with cross-functional teams.

Technical knowledge mastered or to be developed together:

Preferred Certifications:

1. GCIH
2. CISSP
3. CEH
4. CISM
5. OSCP
6. AWS Certified Security - Specialty
7. Azure Security Engineer Associate

Soft skills:

1. Communication Skills: Ability to convey complex technical information clearly and effectively to both technical and non-technical stakeholders.
2. Problem-Solving: Strong analytical skills to identify, diagnose, and resolve security incidents efficiently.
3. Attention to Detail: Keen eye to identify and analyze the small details that could indicate potential vulnerabilities or threats.
4. Stress Management: Ability to remain calm and focused under pressure, particularly during high-stakes incidents or breaches.
5. Teamwork and Collaboration: Ability to work cooperatively with other team members, departments, and external entities during incidents.
6. Critical Thinking: Ability to think logically and critically to evaluate threats, develop mitigation strategies, and improve incident response processes.
7. Adaptability: Ability to swiftly adapt to changing threat landscapes and respond to live incidents dynamically.
8. Time Management: Effective prioritization and organization of tasks to handle multiple incidents simultaneously and meet tight deadlines.
9. Leadership: Ability to lead incident response efforts, guide team members, and manage the incident response lifecycle.
10. Empathy and Emotional Intelligence: Understanding and managing one's own emotions and those of others, especially during stressful situations to maintain a positive and productive work environment.
11. Negotiation Skills: Ability to negotiate with internal and external stakeholders, including during mitigation and remediation efforts.
12. Ethics and Integrity: Strong ethical grounding and integrity, essential for handling sensitive and confidential information appropriately.

Do you recognize yourself in this description?

Do you want to learn more?

Apply now You will be contacted shortly

What if the mission isn’t an exact match for you?

Let’s stay in touch Sign up, and we may contact you for other future opportunities: https://nrbcareers.com/o/spontaneous-application

OUR RECRUITMENT PROCESS

Our recruitment process is simple, fast and transparent:

KEYWORDS

DevSecOps – cybersecurity – security architecture