Security Auditor

About the Company
At SANDT, we operate at the crossroads of strategy, execution, and technology; turning complex challenges into concrete outcomes. Our work bridges IT and OT through smart, pragmatic solutions that create connected environments and lasting impact. We believe in Excellence over Ego, Engagement with Impact, and Evolution as a Mindset; three values that shape how we think, collaborate, and grow with our clients. To support that growth, we developed SANDTedge, our internal framework that gives every consultant a clear, shared trajectory with concrete benchmarks across impact, ownership, problem-solving, and communication.

About the Role
SANDT is looking for an Application Security Auditor to support security and privacy initiatives within complex, business-critical application environments. In this role, you will assess the security of both internally developed and third-party applications across development and production environments. You will identify vulnerabilities, evaluate how security and Privacy by Design principles are implemented in practice, and translate your findings into concrete remediation recommendations. Depending on the context, you may also perform penetration testing and work directly with technical teams, project stakeholders, and security professionals to strengthen applications throughout their lifecycle. We are currently open to both Experienced and Senior profiles. Responsibilities
• Conduct application security audits across development and production environments.
• Assess applications from a confidentiality, integrity, and availability perspective.
• Review both internally developed applications and externally sourced solutions.
• Use appropriate security audit tools depending on the application, technology, and type of assessment.
• Identify and assess common application vulnerabilities, including attacks described in the OWASP Top 10.
• Evaluate the effective implementation of Privacy by Design and relevant data-protection requirements.
• Review security at different levels, including methodologies, project practices, technical implementation, and application code where relevant.
• Identify strengths, weaknesses, vulnerabilities, and security risks through technical testing and stakeholder interviews.
• Document findings clearly and provide pragmatic remediation recommendations for each identified weakness.
• Perform penetration testing when required.
• Communicate technical findings to both security specialists and other technical or business stakeholders.
• Follow up on remediation actions and contribute to the continuous improvement of application security practices. Qualifications & Experience Professional Experience We are considering two levels of seniority:
• Experienced Application Security Auditor : At least 3 years of relevant experience in application security auditing or a closely related security function.
• Senior Application Security Auditor : More than 10 years of relevant experience in application security auditing or a closely related security function. For both levels, you should have:
• Hands-on experience conducting application security audits on a regular basis.
• Experience working on medium to large-scale IT projects and complex application environments.
• Experience identifying security weaknesses and translating findings into actionable recommendations.
• Exposure to security assessments involving both technical teams and broader project stakeholders.
• A Master’s degree or equivalent qualification in IT, cybersecurity, computer science, engineering, or a related domain, or equivalent relevant IT experience. Technical Requirements
• Strong knowledge of application security and broader information security principles.
• Hands-on knowledge of security audit tools, with the ability to select the appropriate tools depending on the type of application and assessment.
• Strong understanding of application vulnerabilities and attack techniques described in the OWASP Top 10.
• Experience assessing applications in Java-based environments.
• Familiarity with platforms such as Microsoft SharePoint and other enterprise application environments.
• Understanding of secure software development principles and application security throughout the development lifecycle.
• Knowledge of Privacy by Design principles and their practical implementation.
• Ability to review security controls through technical testing, interviews, documentation review, and, where relevant, source-code analysis.
• Experience with penetration testing is an asset. Certifications At least one of the following certifications is required:
• CISA
• CISM
• CISSP Additional security or audit certifications such as CEH or GWAPT are considered an asset. Soft Skills
• Strong analytical and problem-solving mindset.
• Result-oriented and pragmatic approach.
• Strong sense of responsibility and ownership.
• Ability to communicate security risks and recommendations clearly.
• Client and stakeholder orientation.
• Structured approach to audits, documentation, and follow-up.
• Ability to challenge technical choices constructively while remaining solution-oriented.
• This role requires strong professional proficiency in both French and Dutch with a strong professional comprehension of English

What we offer
Structured Career Growth – With SANDTedge, we provide clear expectations, continuous feedback, and a transparent path for progression at every stage of your career. Competitive Benefits – At SANDT,

we offer
a competitive rewards package, including a company car or mobility budget, phone subscription, group and health insurance, 10€ lunch vouchers, and more. Inclusive Culture – We value diversity and foster an environment where different perspectives drive innovation, creativity, and collaboration. Stability & Trust – Reliability is at the heart of what we do, building lasting relationships with our clients, partners, and employees. At SANDT, we’re committed to creating a workplace where everyone belongs and can thrive. We embrace diversity and ensure fair opportunities for all. We are an equal opportunity employer. All qualified applicants are considered regardless of gender, race, age, sexual orientation, beliefs, disability, or any other protected characteristics. Want to become a part of the SANDTribe yet? Send us an email to careers@sandt.be or apply directly through LinkedIn.