Application Security Champion | DevSecOps & Secure-SDLC Lead

Approach Cyber; Waals-Brabant; On-site; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Mobility budget or company car

Pension plan

Complementary insurance

32 days holiday/year

Flexible home working policy

Meal vouchers

Job summary

Approach Cyber in Belgium is seeking an experienced Application Security Consultant to join our growing team. You will act as a Security Champion for customers, shaping Secure-SDLC, enabling security by design, and guiding development teams in integrating SAST/DAST, OWASP ASVS, and DevSecOps practices.

You will collaborate with architects, participate in SAMM assessments, verify security test coverage before launches, and lead training sessions for new security champions.

Qualifications

• 5–6 years of experience in application security and development
• Hands‑on knowledge in development across languages (C#, JavaScript, Java)
• Proven skillset in application security technologies (SAST/DAST, Secure-SDLC, OWASP ASVS) and security tooling

Responsibilities

• Operationalise Security by Design across apps and data
• Guide Secure-SDLC/DevSecOps implementations for client projects
• Help development teams integrate secure practices (SAST/DAST/SCA)
• Ensure security requirements are identified and aligned with policies
• Assist architects in designing secure solution components
• Contribute to SDLC assessments (SAMM)
• Verify security test coverage before production launches
• Provide security support and coaching to client teams
• Lead training sessions for new security champions at client sites

Skills

Development knowledge (C#, JS, Java)

Application security technologies

English & French/Dutch communication

Tools

Fortify

SonarQube

Azure DevOps

OAuth / KeyCloak

Job description

Approach Cyber in Belgium is seeking an experienced Application Security Consultant to join our growing team. You will act as a Security Champion for customers, shaping Secure-SDLC, enabling security by design, and guiding development teams in integrating SAST/DAST, OWASP ASVS, and DevSecOps practices.

You will collaborate with architects, participate in SAMM assessments, verify security test coverage before launches, and lead training sessions for new security champions.