Application Security SME

MSI Pharma; Belgique; On-site; EUR 80,000 - 120,000; Full time

Job summary

A leading pharmaceutical company is seeking a Senior Application Security expert for a fully remote role. This position involves guiding a Center of Excellence in India while managing complex security initiatives across custom and SaaS applications. The ideal candidate will have over 8 years of experience in Application Security, with strong knowledge of various AppSec tools. Excellent communication and advisory skills are essential to collaborate with both technical and non-technical teams.

Qualifications

• 8+ years in Application Security with custom development and SaaS.
• Strong experience with AppSec tooling: Snyk, Invicti, Sonatype, Intigriti.
• Deep understanding of secure SDLC and vulnerability management.

Responsibilities

• Act as senior SME for Application Security across custom and SaaS development.
• Guide the AppSec CoE in India with weekly touchpoints and escalations.
• Lead tooling migrations from Invicti to a new platform and Sonatype to SaaS.

Skills

Application Security

Snyk

Invicti

Sonatype

Intigriti

Job description

Location: Fully Remote (Europe / Brussels time zone preferred) Start Date: ASAP End Date: June 2026 (Likely extension to end of 2026)

Context Our client is expanding its Application Security capabilities within its custom development landscape. Reporting to the Head of Application Security, this role focuses on securing internally built applications, SaaS applications, and cloud‑related security initiatives. You will operate as a Senior SME, guiding a Center of Excellence (CoE) based in India, driving tooling migrations (Invicti + Sonatype), and collaborating across a complex international environment. This is a strategic, advisory‑heavy position for a seasoned Application Security professional who thrives in multi‑stakeholder, enterprise‑scale settings.

Key Responsibilities

• Act as senior SME for Application Security across custom and SaaS development
• Guide the AppSec CoE in India (weekly touchpoints, escalations, dashboards)
• Lead tooling migrations: Invicti → new platform, Sonatype → SaaS
• Support developers with onboarding, integration questions, and complex AppSec issues
• Enhance AppSec processes, documentation, and secure SDLC practices
• Coordinate with security, cloud, development, and platform stakeholders

Hard Skills

• 8+ years in Application Security (custom dev + SaaS)
• Strong experience with AppSec tooling: Snyk, Invicti, Sonatype, Intigriti (or similar)
• Deep understanding of secure SDLC, secure coding, vulnerability management
• Experience in complex, multi‑stakeholder enterprise environments
• Security certifications, pharma exposure, GxP familiarity, GenAI/LLM security

Soft Skills

• Strong communicator and confident advisor
• Proactive, autonomous, and improvement‑driven
• Able to collaborate effectively across technical and non‑technical teams
• Comfortable leading processes, roadmaps, and security initiatives

Language Requirements

• English: Required
• French/Dutch: Advantageous but not mandatory