Application Architect with Security Focus

HumanInTech; Brussel Hoofdstad; Hybride; EUR 75 000 - 95 000; Plein temps

Avantages offerts par ce poste

Hybrid working model

Brussels-based assignment

Freelance or employee

Résumé du poste

HumanInTech seeks an experienced application or security architect to lead a secure development programme for a Belgian public‑sector organisation, embedding security into the software development lifecycle in response to the NIS2 directive and CyFun.

You will implement SAMM, establish SecDevOps foundations, build security dashboards, deliver training and guide internal teams and external suppliers. Brussels, hybrid work; Dutch or French required, English an asset.

Qualifications

• Proven track record in security architecture reviews (3+ years).
• 3+ years implementing SCA, SAST and DAST in CI/CD pipelines.
• Experience delivering DevSecOps initiatives.
• Familiarity with CyFun, SAMM and related frameworks.
• Strong project management, planning and stakeholder collaboration.

Responsabilités

• Lead the launch of a secure development programme within a Belgian public-sector organisation.
• Embed security into the SDLC in response to NIS2 and CyFun frameworks.
• Implement SAMM to integrate secure development into daily activities.
• Establish SecDevOps foundations with continuous security practices.
• Create security dashboards and define routines to improve development security.
• Guide teams to raise security maturity and act as project lead.

Connaissances

Security architectures

DevSecOps

CI/CD tooling

SCA SAST DAST

Agile/Lean

Project management

CyFun SAMM

Stakeholder management

Team leadership

Communication

Formation

Bachelor's degree

Outils

Java

Angular

Oracle

Web services

Service bus

SAMM

CyFun

Description du poste

What you will do

You will lead the launch of a secure development programme within a Belgian public-sector organisation, embedding security into the software development lifecycle in response to the NIS2 directive and the Belgian CyFun framework.

Your work will focus on implementing the OWASP Software Assurance Maturity Model (SAMM) to help development teams integrate secure development into their daily activities. You will establish the foundations of a SecDevOps practice, emphasising continuous security practices throughout the development process.

Key responsibilities include:

• Analysing and mapping the changes needed in the development process, documenting them clearly for both technical and non-technical audiences
• Setting up application security dashboards and defining routines to continuously improve development security
• Guiding existing teams in incorporating secure development into their daily work, raising overall security maturity
• Acting as project lead: participating in follow-up meetings, reporting on planning and progress, and documenting chosen methodologies and their implementation
• Creating a standard directive describing how to apply secure development concretely, both for internal projects and external suppliers
• Developing a security matrix to assess external projects
• Designing and delivering training on secure development to the teams involved
• Reviewing and commenting on technical designs, providing well-founded advice on infrastructure, software and working methodologies

What we are looking for

Essential experience and skills:

• Demonstrable experience in similar projects in an environment of comparable size
• At least 3 years of experience reviewing security architectures
• At least 3 years of experience setting up SCA, SAST and DAST tooling in a CI/CD pipeline
• At least 3 years of experience in DevSecOps
• Knowledge of project management
• Agile and Lean Software Development
• Security frameworks (CyFun, SAMM and similar)
• Quality assurance and testing, including test-driven development
• Results-oriented, client-focused and a strong sense of responsibility
• Planning and organisational skills, with the ability to steer, monitor and adjust
• Negotiation skills and relationship management
• Ability to build, lead and supervise a team

Additional assets:

• Knowledge of ITIL
• Knowledge of Java
• Knowledge of Angular
• Knowledge of Oracle
• Knowledge of web services and service bus technologies
• Familiarity with the SAMM framework
• Familiarity with the CyFun framework

You are an experienced application architect with solid security knowledge, or a security architect with strong application development expertise. You can communicate effectively with both highly technical profiles and less specialised colleagues, and you can promote security and development concepts convincingly.

The setting

This assignment runs from July 2027 to the end of December 2027, with 880 hours planned during the second semester. An optional extension is foreseen for 2028, with a maximum of 1760 hours.

The role is based in Brussels and follows a hybrid working model.

Working languages are Dutch or French (active knowledge required), with English as an asset.

You can join us for this assignment as a freelancer or as an employee of HumanInTech. Same role, same team. If you join as an employee, your employment continues beyond this assignment. When it ends, you'll work together to find your next assignment.

Location: Brussels, hybrid

Employer / contracting party: HumanInTech

Applications close (Brussels time): October 2, 2026 at 2:00 AM

Engagement: Freelance or employed by HumanInTech

Working hours: Full-time

Experience: 6-10 years or more

Education: Bachelor's or more

Published: September 2026