Cyber Security Engineer

Stott and May Inc.; Herstal; On-site; EUR 140,000 - 180,000; Part time

Job summary

Stott and May Inc. is seeking a Cybersecurity Engineer (Confirmed Level) to join a critical infrastructure environment in Brussels. This freelance role blends hands-on automation, vulnerability lifecycle management, and DevSecOps across hybrid cloud and on-prem systems.

The ideal candidate will automate security workflows, harden infrastructure, manage vulnerability exposure, and integrate tools via APIs to prevent recurrence of issues. EU SECRET clearance is mandatory at start.

Qualifications

• Hands-on scripting in Python/Bash for security automation.
• Experience with vulnerability scanners and SIEM tooling.
• Active EU SECRET clearance or transferable equivalent required.
• Hybrid cloud and on-prem infrastructure security experience.

Responsibilities

• Automate security workflows and API integrations across platforms.
• Oversee vulnerability lifecycle from identification to verification.
• Harden Linux/Windows/VMware ESXi and network devices.
• Coordinate patching, config changes, and security updates.
• Create vulnerability reports, remediation plans, and dashboards.
• Design security services for enhanced availability and resiliency.

Skills

Python

Bash

Automation

API Integration

Education

EQF Level 5 or higher

Tools

Rapid7 Nexpose

Tenable Nessus

Splunk

Jira

ServiceNow

VMware ESXi

Docker

Kubernetes

Job description

Cybersecurity Engineer (Confirmed Level)

Role Type: Freelance / External Contractor

Daily Rate: €669 / day

Location: Onsite – Brussels, Belgium

Security Clearance: EU SECRET / SECRET UE (Mandatory)

Position Overview

We are seeking a Cybersecurity Engineer to join an critical infrastructure environment in Brussels. This role combines hands‑on automation, vulnerability lifecycle management, system administration, and DevSecOps practices in a hybrid cloud and on‑premises ecosystem.

The ideal candidate will focus on automating security workflows, hardening infrastructure, managing vulnerability exposure, and integrating tools via APIs to prevent manual recurrence of security issues.

Key Responsibilities

• Automation & API Integration: Develop custom internal scripts (Python, Bash) to automate tasks, analyze security data, and integrate APIs across security platforms and infrastructure tools.
• Vulnerability Lifecycle Management: Oversee identification, assessment, prioritization, remediation tracking, and verification using enterprise scanners across cloud and on‑prem environments.
• Infrastructure & OS Hardening: Deploy, manage, and harden server environments (Linux, Windows, VMware ESXi) and network devices (firewalls, routers, switches, VPN gateways).
• Remediation & Coordination: Work closely with IT Infrastructure, DevOps/Cloud, SOC, Compliance, and vendors to coordinate patching, configuration changes, and security updates.
• Reporting & Metrics: Prepare comprehensive vulnerability assessment reports, remediation plans, operational procedures, dashboards, and metrics (KPIs, active threat trends, ticket trends) for management and technical teams.
• Infrastructure Resiliency: Design and deploy security services to enhance the availability, scalability, latency, and efficiency of threat management systems.

Required Qualifications & Experience

• Education: Minimum EQF Level 5 (Post‑secondary education / Associate degree) or higher.
• Security Clearance: Active EU SECRET (or national equivalent transferable to EU SECRET) is mandatory upon start.
• Scripting & Automation: Strong hands‑on proficiency in Python and Bash for scripting, data parsing, and API interactions.
• Vulnerability Scanners & SIEM: Practical experience with enterprise scanners (Rapid7 Nexpose, Tenable Nessus) and SIEM platforms (Splunk).
• OS & Virtualization: In‑depth administration skills in Linux, Windows, and VMware ESXi.
• Cloud & Modern Tech Stack: Hands‑on exposure to AWS/Azure, containerized environments (Docker, Kubernetes), DevSecOps pipelines, and message brokers (Kafka, RabbitMQ, SQS).
• Network Security: Strong understanding of TCP/IP, network protocols, firewalls, and VPN gateways.
• Ticketing & Workflows: Experience with Jira and ServiceNow.

Desirable Skills

• Programming experience in Java, Go, or Rust.
• Knowledge of advanced threat intelligence frameworks and emerging attack vectors.