Security Engineer

Il y a 3 heures

Arrondissement of BrusselsCapital, Brussels, Belgique Stott and May Inc. Temps plein
ulliRole Type: Freelance / External Contractor /liliSecurity Clearance: EU SECRET / SECRET UE (Mandatory) /li /ulpPosition Overview We are seeking a Cybersecurity Engineer to join an critical infrastructure environment in Brussels. This role combines hands-on automation, vulnerability lifecycle management, system administration, and DevSecOps practices in a hybrid cloud and on-premises ecosystem. The ideal candidate will focus on automating security workflows, hardening infrastructure, managing vulnerability exposure, and integrating tools via APIs to prevent manual recurrence of security issues. /ph3Responsibilities /h3ulliAutomation API Integration: Develop custom internal scripts (Python, Bash) to automate tasks, analyze security data, and integrate APIs across security platforms and infrastructure tools. /liliVulnerability Lifecycle Management: Oversee identification, assessment, prioritization, remediation tracking, and verification using enterprise scanners across cloud and on-prem environments. /liliInfrastructure OS Hardening: Deploy, manage, and harden server environments (Linux, Windows, VMware ESXi) and network devices (firewalls, routers, switches, VPN gateways). /liliRemediation Coordination: Work closely with IT Infrastructure, DevOps/Cloud, SOC, Compliance, and vendors to coordinate patching, configuration changes, and security updates. /liliReporting Metrics: Prepare comprehensive vulnerability assessment reports, remediation plans, operational procedures, dashboards, and metrics (KPIs, active threat trends, ticket trends) for management and technical teams. /liliInfrastructure Resiliency: Design and deploy security services to enhance the availability, scalability, latency, and efficiency of threat management systems. /li /ulh3Qualifications /h3ulliEducation: Minimum EQF Level 5 (Post-secondary education / Associate degree) or higher. /liliSecurity Clearance: Active EU SECRET (or national equivalent transferable to EU SECRET) is mandatory upon start. /li /ulh3Required Skills /h3ulliScripting Automation: Strong hands-on proficiency in Python and Bash for scripting, data parsing, and API interactions. /liliVulnerability Scanners SIEM: Practical experience with enterprise scanners (Rapid7 Nexpose, Tenable Nessus) and SIEM platforms (Splunk). /liliOS Virtualization: In-depth administration skills in Linux, Windows, and VMware ESXi. /liliCloud Modern Tech Stack: Hands-on exposure to AWS/Azure, containerized environments (Docker, Kubernetes), DevSecOps pipelines, and message brokers (Kafka, RabbitMQ, SQS). /liliNetwork Security: Strong understanding of TCP/IP, network protocols, firewalls, and VPN gateways. /liliTicketing Workflows: Experience with Jira and ServiceNow. /li /ulh3Preferred Skills /h3ulliProgramming experience in Java, Go, or Rust. /li /ulpKnowledge of advanced threat intelligence frameworks and emerging attack vectors. /p