Security Engineer

Il y a 3 heures

Brussels, Belgique Stott and May Inc. Temps plein
  • Role Type: Freelance / External Contractor
  • Security Clearance: EU SECRET / SECRET UE (Mandatory)

Position Overview We are seeking a Cybersecurity Engineer to join an critical infrastructure environment in Brussels. This role combines hands-on automation, vulnerability lifecycle management, system administration, and DevSecOps practices in a hybrid cloud and on-premises ecosystem. The ideal candidate will focus on automating security workflows, hardening infrastructure, managing vulnerability exposure, and integrating tools via APIs to prevent manual recurrence of security issues.

Responsibilities

  • Automation & API Integration: Develop custom internal scripts (Python, Bash) to automate tasks, analyze security data, and integrate APIs across security platforms and infrastructure tools.
  • Vulnerability Lifecycle Management: Oversee identification, assessment, prioritization, remediation tracking, and verification using enterprise scanners across cloud and on-prem environments.
  • Infrastructure & OS Hardening: Deploy, manage, and harden server environments (Linux, Windows, VMware ESXi) and network devices (firewalls, routers, switches, VPN gateways).
  • Remediation & Coordination: Work closely with IT Infrastructure, DevOps/Cloud, SOC, Compliance, and vendors to coordinate patching, configuration changes, and security updates.
  • Reporting & Metrics: Prepare comprehensive vulnerability assessment reports, remediation plans, operational procedures, dashboards, and metrics (KPIs, active threat trends, ticket trends) for management and technical teams.
  • Infrastructure Resiliency: Design and deploy security services to enhance the availability, scalability, latency, and efficiency of threat management systems.

Qualifications

  • Education: Minimum EQF Level 5 (Post-secondary education / Associate degree) or higher.
  • Security Clearance: Active EU SECRET (or national equivalent transferable to EU SECRET) is mandatory upon start.

Required Skills

  • Scripting & Automation: Strong hands-on proficiency in Python and Bash for scripting, data parsing, and API interactions.
  • Vulnerability Scanners & SIEM: Practical experience with enterprise scanners (Rapid7 Nexpose, Tenable Nessus) and SIEM platforms (Splunk).
  • OS & Virtualization: In-depth administration skills in Linux, Windows, and VMware ESXi.
  • Cloud & Modern Tech Stack: Hands-on exposure to AWS/Azure, containerized environments (Docker, Kubernetes), DevSecOps pipelines, and message brokers (Kafka, RabbitMQ, SQS).
  • Network Security: Strong understanding of TCP/IP, network protocols, firewalls, and VPN gateways.
  • Ticketing & Workflows: Experience with Jira and ServiceNow.

Preferred Skills

  • Programming experience in Java, Go, or Rust.

Knowledge of advanced threat intelligence frameworks and emerging attack vectors.