Application Security Analyst M/V/X

WERAANBIEDING UIT EEN ANDERE REGIO; Mont-Saint-Guibert; Sur place; EUR 55 000 - 75 000; Plein temps

Résumé du poste

WERAANBIEDING UIT EEN ANDERE REGIO is seeking an Application Security Analyst to enhance their Secure Software Development practice. You will conduct security assessments, propose security recommendations, and guide development teams in integrating application security best practices.

This role also involves mentoring team members and staying updated on technological evolutions. Ideal candidates should have experience in security assessments and a strong understanding of Secure-SDLC methodologies.

Qualifications

• Experience with security assessments on applications is essential.
• Ability to provide security recommendations and build application security roadmaps.
• Familiarity with methodologies for Secure-SDLC and DevSecOps.

Responsabilités

• Assess existing SDLC and provide guidance on secure practices.
• Help teams integrate security into their development processes.
• Deliver training sessions for security champions.

Connaissances

Application Security

Secure Software Development

Security Assessment

DevSecOps

Coaching

OWASP ASVS

Description du poste

We are looking for

As an Application Security Analyst, you will integrate our Secure Software Development practice. Together with our 20 experts, we develop, maintain, support and host Specialized Software. Our expertise is two-fold: proposing our expertise to clients’ development teams in securing their Software Development Life Cycle (SSDLC or Secured-SDLC). Developing highly secured software (Security by design) based on customers’ requirements (e.g. itsme – authentication app). In this frame, we are recruiting an Application Security Analyst who will play a key role in our application security services growth over the next few years.

Your role

Your role as an Application Security Analyst is to carry out security assessments on applications used by our customers. Based on the results of the assessment, you will propose security recommendations. These are short-, medium- and long-term solutions that will serve as the basis for building an application security roadmap for the company. Depending on your qualifications, you may be required to implement these recommendations in terms of processes, tools and developer trainings (security champions, awareness). Your main contacts at the customer will be the CISOs and their security teams.

Your tasks will consist of:

• Assess an existing SDLC (i.e., SAMM Assessment but we stay open to other methodologies we’ll define together).
• Give guidance on establishing a secure software development lifecycle (Secure-SDLC / DevSecOps).
• Help development teams to integrate application security best practices (e.g. OWASP ASVS), and security tooling/processes in their development pipeline (SAST, DAST, SCA, CVE follow-up, ...).
• Give training and coaching sessions to new security champions at client.
• Participate in presales meetings around application security.

Future responsibilities

The role will evolve to include the following tasks and responsibilities in the short term, depending on your experience and evolution pace. You will then bring your energy on Solution Owner responsibilities like:

• Mentorship and support: Providing guidance and mentorship to team members, especially those in junior positions, will be crucial. Your support will help them navigate complex missions, leading their professional growth and ensuring successful project outcomes.
• Technology watch: You will follow new tools, technical evolutions and industry trends, and share your knowledge with the team. This proactive approach will ensure that our offerings remain cutting‑edge, relevant, and aligned with our clients’ ever‑evolving needs.
• Relationships strengthening with our trusted business partners/suppliers: You will be our key representative in application security associations, or during application security events/conferences/meetings.
• Asset creation: Developing new assets and methodologies to complement and enhance our solutions will be part of your responsibility. These assets and methodologies will not only increase the efficiency of our solutions but also support and empower your colleagues in delivering high-quality results.