Cybersecurity Engineer

Relu; Wilsele; Hybrid; EUR 55,000 - 85,000; Full time

Job summary

Relu is seeking a Cybersecurity Engineer to own platform and software security. You will build an ISMS from scratch, drive ISO 27001 Stage 1 readiness, and enable a Trust Center to streamline security questionnaires for sales.

You will run pentests, triage vulnerabilities, and manage security across CI/CD pipelines and cloud infrastructure. A background in SaaS/healthtech with DevSecOps experience is highly valued.

Qualifications

• ISO 27001, SOC 2, or GDPR knowledge or experience.
• Experience securing SaaS/healthtech context preferred.
• Ability to write and maintain security policies and runbooks.

Responsibilities

• Build our ISMS from the ground up including scope, risk assessment, SoA, and core policies.
• Lead ISO 27001 Stage 1 audit readiness.
• Establish a live Trust Center to automate security questionnaires for sales.
• Perform penetration testing and close all critical/high findings.
• Implement vulnerability management across code, deps, containers, and Terraform.
• Harden AWS and Kubernetes with least-privilege, segmentation, and threat detection.

Skills

Vulnerability assessment

Threat modeling

Incident response

AWS security

Network segmentation

IAM policies

Secrets management

Burp Suite

Metasploit

DevSecOps

Education

Bachelor's degree in CS or related

Tools

Burp Suite

Metasploit

Checkov

Terraform

Kubernetes

Docker

SIEM platforms

Job description

Your mission

Are you passionate about technology with a purpose? Want to make a meaningful impact on people's health? At Relu, we're growing - and we're looking for someone like you.
We're looking for aCybersecurity Engineer to own our Platform / Software security. You will:

• Build our ISMS from the ground up — scope, risk assessment, Statement of Applicability, and core policies — and lead us through ISO 27001 Stage 1 audit
• Get Vanta green across every system, with a live Trust Center that takes manual security questionnaires off sales' plate for good
• Run a penetration test and close every critical and high finding before it becomes someone else's problem
• Stand up vulnerability management across code, dependencies, containers, and Terraform — with a triaged backlog and fix deadlines that actually get met
• Harden our AWS and Kubernetes baseline with least-privilege access, network segmentation, and threat-detection piped straight to on-call
• Write and tabletop-test our incident response playbook, GDPR 72-hour breach notification included, and align it with our MDR technical documentation so we run one evidence set — not two

Your profile

What you should bring to the team:

• 2–5 years of hands-on cybersecurity engineering experience, including vulnerability assessment, threat modeling, and incident response
• Solid command of AWS security — IAM policies, network segmentation, secrets management
• Proficiency with security tooling: SIEM platforms, IDS/IPS, and penetration testing frameworks like Burp Suite or Metasploit
• Experience securing software development pipelines (SAST, DAST, dependency scanning) and working within a DevSecOps culture
• Working knowledge of compliance frameworks such as ISO 27001, SOC 2, or GDPR — ideally in a SaaS or healthtech context
• Ability to write and maintain security policies, runbooks, and incident response playbooks that people actually use

The 'Nice-to-haves':

• Experience in a regulated industry — healthcare, medtech, or dental — with exposure to HIPAA or MDR requirements
• Familiarity with zero-trust architecture and modern identity solutions like Auth0
• Hands-on experience with container security (Docker, Kubernetes) and IaC scanning tools like Checkov
• Relevant certifications: CEH, OSCP, CISSP, or AWS Security Specialty

How you work:

• You take ownership and bring a builder mindset — you're comfortable defining security practices from scratch in a fast-moving environment, not just maintaining what already exists
• You balance thoroughness with pragmatism — you know when to move fast and when the moment calls for slowing down and doing it right

Why us?

• A mission that matters: we're improving dental care and making higher-quality dentistry accessible to everyone, globally
• A fast-growing company where your growth goes hand-in-hand with ours — real impact, real ownership, and skills in the technologies of the future
• A driven and collaborative team
• Fun team culture: after-works, bi-weekly sports, hackathons, retreats