DevSecOps Application Security Architect

Rhox; Sint-Gillis; Sur place; EUR 70 000 - 100 000; Plein temps

Résumé du poste

Federal Public Service is launching a secure development programme to embed security across software delivery, aligned with NIS2 and CyFun requirements. You will lead foundations, integrate SCA/SAST/DAST in CI/CD, and map changes to development processes while creating dashboards and standard directives for internal and external projects.

You will collaborate with existing development teams, explain security concepts, and guide training and governance to ensure continuous security improvements

Qualifications

• Background as an application architect with strong security knowledge.
• Proven track record delivering security initiatives at scale.
• At least 3 years reviewing security architectures.
• At least 3 years implementing SCA, SAST and DAST in CI/CD pipelines.
• At least 3 years of DevSecOps experience.
• Knowledge of CyFun and SAMM frameworks.
• Ability to map and document secure development processes clearly.
• Strong communication to technical and non-technical colleagues.

Responsabilités

• Review security architectures and advise on designs, infrastructure and development methods.
• Map process changes and document clear guidance for secure development.
• Embed SCA, SAST and DAST tools in CI/CD pipelines and promote continuous security.
• Build application security dashboards and define routines for ongoing improvement.
• Produce a standard directive for internal projects and external suppliers.
• Create a security matrix to assess externally delivered projects.
• Lead planning, progress reporting, documentation and secure-development training.

Connaissances

Security architecture

Application architecture

DevSecOps

CI/CD security tooling

SCA

SAST

DAST

Agile/Lean SD

CyFun knowledge

SAMM

Security concept communication

Outils

SCA tooling

SAST tooling

DAST tooling

CI/CD tooling

Description du poste

Federal Public Service is launching a secure development programme to embed security across software delivery, aligned with NIS2 and CyFun requirements. You will lead foundations, integrate SCA/SAST/DAST in CI/CD, and map changes to development processes while creating dashboards and standard directives for internal and external projects.

You will collaborate with existing development teams, explain security concepts, and guide training and governance to ensure continuous security improvements