Application Architect with Security Focus

keystone-solutions; Brussel; Sur place; EUR 75 000 - 105 000; Plein temps

Résumé du poste

Keystone Solutions is seeking an experienced Application Architect with a strong focus on security for a hands-on consultancy mission at a client site. You will drive secure development practices to align with the NIS2 directive, map changes in development processes, and document policies and dashboards for ongoing governance.

The role requires coordinating with technical and non-technical stakeholders, leading security architecture reviews, and delivering SAMM- and CyFun-based guidance,

Qualifications

• At least 3 years of experience in security architecture reviews.
• 3+ years implementing SCA, SAST, and DAST in CI/CD pipelines.
• Experience in DevSecOps and secure development practices.
• Knowledge of project management and Agile/Lean methodologies.
• Ability to lead, document, and train teams on secure development.

Responsabilités

• Lead the security architecture reviews for client projects.
• Implement and monitor secure development practices and CI/CD tooling.
• Develop and maintain security-related dashboards and documentation.
• Deliver training and guidance on secure development to teams.
• Report planning, progress, and methodology adoption to stakeholders.

Connaissances

Security architecture

DevSecOps

Agile / Lean software

Project management

Negotiation & leadership

Team leadership

Communication to technical and non-IT

Security concepts presentation

Outils

SCA tools

SAST tools

DAST tools

CI/CD integration

SAMM framework

CyFun framework

ITIL

Java

Angular

Oracle

Web Services / Service Bus

Description du poste

Mission Overview

We are seeking an experienced Application Architect with a strong focus on security for a consultancy mission at a client site representing Keystone Solutions. The role is crucial in ensuring compliance with the new NIS2 directive, which emphasizes security in software development.

Profile Description

The ideal candidate will have a solid background in security or application architecture, with proven experience in implementing and analyzing necessary changes in development processes. This role requires the ability to clearly map and document these changes.

The candidate must communicate effectively with both highly technical profiles and less specialized collaborators, promoting security and development concepts convincingly.

As part of establishing a secure development practice, the candidate will leverage the Software Assurance Maturity Model (SAMM) from OWASP, which aids organizations in enhancing software security through best practices and measurable goals. Familiarity with this framework is a significant advantage.

The profile will assist existing teams in integrating secure development into their daily activities, laying the groundwork for a Secure Development program. Emphasis will be placed on SecDevOps and the implementation of continuous security practices.

By documenting, describing, and training teams on these methodologies, the candidate will actively contribute to enhancing the security of applications developed within and for the client, while increasing the overall security maturity of development teams. The profile will also participate in establishing application security dashboards and defining routines and processes to continuously improve development security.

A key outcome of this project will be the creation of a standard directive detailing how to concretely apply secure development, not only for internal projects but also for external suppliers, along with a security matrix for evaluating external projects.

Given that this is the project's launch, the candidate must possess the experience and maturity to act as a project lead, participating in follow-up meetings, reporting on planning and progress, and drafting documentation related to chosen methodologies and their implementation. The candidate may also be required to design and deliver training on secure development to the relevant teams.

As an expert architect, the candidate should be capable of evaluating and commenting on technical designs, providing advice based on both hardware and software infrastructure as well as working methodologies.

Required Skills

• Demonstrated experience in similar projects within an environment comparable to the client.
• Minimum 3 years of experience in security architecture reviews.
• Minimum 3 years of experience in implementing SCA, SAST, and DAST tools in a CI/CD pipeline.
• Minimum 3 years of experience in DevSecOps.
• Knowledge of project management.
• Agile / Lean Software Development.
• Security frameworks (CyFun, SAMM, etc.).
• Quality assurance and testing (test-driven development).
• Result-oriented, customer-focused, and responsible.
• Planning, organizational, steering, and adjustment capabilities.
• Negotiation skills and relationship management.
• Ability to build, lead, and supervise a team.

Additional Assets

• Knowledge of ITIL.
• Knowledge of Java.
• Knowledge of Angular.
• Knowledge of Oracle.
• Knowledge of Web Services and Service Bus technologies.
• Familiarity with the SAMM framework.
• Familiarity with the CyFun framework.

Duration

01/07/2027 - 31/12/2027 6 months (full time)

Skills required

• Languages
• Dutch or French
• English

Language requirements

Dutch or French
Level Active knowledge
English
Level Nice to have