Application Security Engineer

Billit Group; Oost-Vlaanderen; Sur place; EUR 60 000 - 90 000; Plein temps

Résumé du poste

Billit, a Belgium-based fintech SaaS, is expanding its development team with an Application Security Engineer. You will raise the security bar across our web apps and embed security throughout our development process, collaborating with squads, QA, and the Enterprise Architect.

You’ll perform vulnerability analysis, reproduce and resolve issues, implement security improvements, design secure-by-design solutions, and support secure coding and remediation.

Responsabilités

• Analyze incoming vulnerability reports and responsible disclosure submissions.
• Validate, reproduce, and resolve security vulnerabilities in web apps.
• Develop and implement security improvements across our web applications.
• Design secure-by-design requirements and complex security controls.
• Analyze findings from SAST/DAST and dependency scanners.
• Support development teams on secure coding and remediation.
• Collaborate with external pentesters to resolve findings.
• Help advance our Application Security roadmap and tooling.

Description du poste

As a fintech SaaS company, we operate in a heavily regulated environment - think DORA and ISO 27001. That’s why we’re expanding our development team with someone who:

• builds our application security in a way that fits an ambitious scale-up


• and sees security not as a brake, but as an integral part of how we build.

What does an Application Security Engineer do at Billit? You’re responsible for raising the security bar across our web applications and embedding security throughout our entire development process. You work closely with the development squads, the QA team, and the Enterprise Architect. You report to the Head of Development & QA. This isn’t a role where everything is already in place: you actively help build out the scalability of our secure development cycle. That means combining hands‑on execution with bringing structure and anticipating what still needs to be built.

In practice:

• You perform technical analyses of incoming vulnerability reports and responsible disclosure submissions.


• You validate, reproduce, and resolve security vulnerabilities.


• You develop and implement security improvements across our web applications.


• You design and implement complex security requirements and secure‑by‑design solutions.


• You analyze and remediate findings from SAST, DAST, dependency scanning, and other security tooling.


• You provide technical support to development teams on secure coding, security architecture, and remediation.


• You collaborate with external pentesters to clarify and resolve technical findings.


• You actively contribute to the further development of our Application Security roadmap and tooling.