Senior Security Engineer

pWe are looking for a Senior Security Engineer to help secure a large container platform and support developers in delivering secure applications. You will represent security in a multidisciplinary container operations team, with support from security specialists and access to further training. /p h3Your role /h3 ul liSecure the container platform and help developers apply security practices to their applications. /li liTake a leading role in container security and advise the team on security best practices. /li liAssess threats using STRIDE and help manage vulnerabilities in container images. /li liIntegrate security into development pipelines and work with cloud-native security tooling. /li liExplain security measures to colleagues and collaborate with internal and external partners. /li /ul h3You have /h3 ul liAt least five years of experience as a Security Consultant in data, infrastructure or applications. /li liExperience analysing, improving and documenting security processes. /li liExperience analysing, improving and documenting security governance. /li liDemonstrable expertise in a specific information security domain. /li liGood knowledge of current IT risks. /li liExperience implementing security solutions to mitigate IT risks. /li liDutch at C2 level. /li /ul h3A plus /h3 ul liAbility to work independently. /li liAbility to work towards a shared goal in a team. /li liAbility to take initiative. /li liWillingness to take responsibility. /li liAbility to explain and enforce security measures with a wide range of staff. /li liAbility to collaborate and build a network with internal and external partners. /li liDiplomatic assertiveness in a multidisciplinary team. /li liExperience with CNAPP platforms, including reporting, runtime policies and compliance checks. /li liProfessional experience with containerisation. /li liExperience with Kubernetes. /li liExperience implementing container security best practices. /li liAbility to coach and advise on container security best practices. /li liExperience with DevSecOps. /li liExperience integrating security into CI/CD pipelines. /li liExperience with SAST tools in development pipelines. /li liExperience with DAST tools in development pipelines. /li liExperience with GitLab CI. /li liExperience detecting and managing vulnerabilities, particularly in container images, using vulnerability management solutions. /li liExperience with Red Hat OpenShift, particularly version 4. /li liExperience with STRIDE threat modelling. /li liExperience with security management frameworks, such as ISO 27000, COBIT for Security, NIST, OWASP or CIS Controls. /li liA relevant information security certification, such as CISM, CISSP or CEH. /li liExperience with scripting. /li liFamiliarity with cloud technologies, such as AWS, Azure or GCP. /li liUnderstanding of cloud security concerns and the advantages and disadvantages of moving to the cloud. /li liA relevant cloud certification. /li /ul h3Working at Neurho /h3 pFounded in 1998, Neurho is a Belgian IT and business consultancy. For more than 25 years, we have been helping banks, insurers, energy companies and public institutions in Belgium and Luxembourg with their transformation projects. At Neurho, you work on varied and challenging assignments, where your expertise is recognised and your growth encouraged. On top of your salary, you enjoy many extra-legal benefits, designed to suit your role, your needs and your personal wishes. /p pNeurho is committed to equal opportunity and welcomes every application, regardless of age, origin, nationality, gender, social background, beliefs or disability. /p