Application Architect with Security Focus

Keystone Solutions; Brussel; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Keystone Solutions seeks an experienced Application Architect focused on security to lead a consultancy mission at a client site in Brussels. You will map and document secure development changes, drive SecDevOps, and promote security throughout the software lifecycle.

Familiarity with SAMM and CyFun frameworks is a strong advantage. You will create security dashboards, train teams, and contribute to the Secure Development program across client projects.

Qualifications

• Minimum 3 years in security architecture reviews.
• Experience implementing SCA, SAST, DAST in CI/CD.
• Knowledge of SecDevOps and secure development.
• Ability to document and map security changes.
• Strong communication with technical and non-technical teams.

Responsabilités

• Lead secure development initiatives.
• Document changes to development processes.
• Provide training on secure practices.
• Act as project lead and report progress.

Connaissances

Security architecture reviews

CI/CD security

DevSecOps

SAMM familiarity

Team leadership

Communication skills

Project management

Agile development

Threat modeling

Outils

SCA

SAST

DAST

CI/CD

Description du poste

Mission Overview

We are seeking an experienced Application Architect with a strong focus on security for a consultancy mission at a client site representing Keystone Solutions. The role is crucial in ensuring compliance with the new NIS2 directive, which emphasizes security in software development.

Mission Overview

We are seeking an experienced Application Architect with a strong focus on security for a consultancy mission at a client site representing Keystone Solutions. The role is crucial in ensuring compliance with the new NIS2 directive, which emphasizes security in software development.

Profile Description

The ideal candidate will have a solid background in security or application architecture, with proven experience in implementing and analyzing necessary changes in development processes. This role requires the ability to clearly map and document these changes.

The candidate must communicate effectively with both highly technical profiles and less specialized collaborators, promoting security and development concepts convincingly.

As part of establishing a secure development practice, the candidate will leverage the Software Assurance Maturity Model (SAMM) from OWASP, which aids organizations in enhancing software security through best practices and measurable goals. Familiarity with this framework is a significant advantage.

The profile will assist existing teams in integrating secure development into their daily activities, laying the groundwork for a Secure Development program. Emphasis will be placed on SecDevOps and the implementation of continuous security practices.

By documenting, describing, and training teams on these methodologies, the candidate will actively contribute to enhancing the security of applications developed within and for the client, while increasing the overall security maturity of development teams. The profile will also participate in establishing application security dashboards and defining routines and processes to continuously improve development security.

A key outcome of this project will be the creation of a standard directive detailing how to concretely apply secure development, not only for internal projects but also for external suppliers, along with a security matrix for evaluating external projects.

Given that this is the project's launch, the candidate must possess the experience and maturity to act as a project lead, participating in follow-up meetings, reporting on planning and progress, and drafting documentation related to chosen methodologies and their implementation. The candidate may also be required to design and deliver training on secure development to the relevant teams.

As an expert architect, the candidate should be capable of evaluating and commenting on technical designs, providing advice based on both hardware and software infrastructure as well as working methodologies.

Required Skills

• Demonstrated experience in similar projects within an environment comparable to the client.
• Minimum 3 years of experience in security architecture reviews.
• Minimum 3 years of experience in implementing SCA, SAST, and DAST tools in a CI/CD pipeline.
• Minimum 3 years of experience in DevSecOps.
• Knowledge of project management.
• Agile / Lean Software Development.
• Security frameworks (CyFun, SAMM, etc.).
• Quality assurance and testing (test-driven development).
• Result-oriented, customer-focused, and responsible.
• Planning, organizational, steering, and adjustment capabilities.
• Negotiation skills and relationship management.
• Ability to build, lead, and supervise a team.

Additional Assets

• Knowledge of ITIL.
• Knowledge of Java.
• Knowledge of Angular.
• Knowledge of Oracle.
• Knowledge of Web Services and Service Bus technologies.
• Familiarity with the SAMM framework.
• Familiarity with the CyFun framework.

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment,

Duration

01/07/2027 - 31/12/2027 6 months

Full time

• (full time)

Skills required

• Languages
• Dutch or French
• English

Language requirements

• Dutch or French
• Level Active knowledge
• English
• Level Nice to have