Expert Lead Application Security

Keystone Solutions; Namen; Sur place; EUR 110 000 - 150 000; Plein temps

Résumé du poste

Keystone Solutions is seeking an Expert Lead in Application Security to join a consultancy mission at a client site in Belgium. The role focuses on mitigating risks across the application lifecycle, ensuring compliance with security requirements, and enhancing security posture.

The incumbent will manage SALM projects, lead technical controls, and collaborate with project managers, developers, and operations to automate risk-based controls across the lifecycle.

Qualifications

• Experience leading application security programs and SALM projects.
• Ability to translate risk into actionable controls and metrics.
• Strong collaboration with project managers and developers.
• Proven leadership and decision-making under pressure.

Responsabilités

• Act as a reference for application security risks, project support, and DevSecOps.
• Manage risk and requirement aspects of SALM projects with traceability.
• Oversee technical controls and integrate them into development practices.
• Lead SALM thematic activities and report progress via tracking tables.
• Collaborate with stakeholders to automate controls across the lifecycle.

Connaissances

Leadership

Responsibility

Technical Credibility

Prioritization

Exigency and Kindness

Pragmatism

Communication

Autonomy and Synthesis

Outils

SAST

DAST

SCA

CI/CD

Description du poste

Mission Overview

Keystone Solutions is seeking an Expert Lead in Application Security to join our consultancy mission at a client site. The client manages a portfolio of approximately 800 applications, including nearly 400 web applications, utilizing various technologies and providers. The role is crucial in mitigating risks associated with application lifecycle management, ensuring compliance with security requirements, and enhancing the overall security posture.

Key Responsibilities

• Act as a reference for application security expertise regarding risks, project support, technical aspects, and DevSecOps.
• Manage risk and requirement aspects of the Secure Application Lifecycle Management (SALM) projects, ensuring alignment of controls with application criticality and decision traceability.
• Oversee technical controls within SALM projects and integrate them into development practices, utilizing results from tools to qualify vulnerabilities and support their remediation.
• Lead SALM thematic activities, monitor operational activities, adherence to methods and deadlines, and report on progress through tracking tables and evolution plans.
• Collaborate with project managers, developers, architects, and operational teams to replace manual controls with a common, risk-proportional, and automated approach covering the entire application lifecycle.

Required Skills

• Leadership: Frame, support, and empower the team.
• Responsibility: Take charge of missions and report on progress.
• Technical Credibility: Handle complex cases and substantiate decisions.
• Prioritization: Make decisions based on risks and capacity.
• Exigency and Kindness: Ensure quality and foster team development.
• Pragmatism: Propose applicable measures.
• Communication: Tailor messages to different audiences.
• Autonomy and Synthesis: Monitor commitments and report on decisions.

Why Join Keystone Solutions

As a consultant at Keystone Solutions, you will engage in dynamic projects across various client environments, providing you with turbo-charged learning opportunities and a chance to skyrocket your ambition. Being a

Duration

04/01/2027 - 03/01/2028 12 months (full time)

Skills required

• Communication avec projets, IT, métiers, fournisseurs et management
• (mandatory) - Level: T3 - Senior - Most recent: Any time
• DevSecOps : SAST, DAST, SCA, CI/CD, secrets et tests d’intrusion
• (mandatory) - Level: T3 - Senior - Most recent: Any time
• Leadership : charge, priorités, accompagnement et qualité
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Pilotage de backlog selon le risque et la criticité
• (mandatory) - Level: T3 - Senior - Most recent: Any time
• Processus, standards, modèles, indicateurs et transfert de compétences
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Référentiels : OWASP, ISO 27001/27005, NIST SSDF, NIS2, CyFun, ANSSI
• (mandatory) - Level: T2 - Confirmed - Most recent: Any time
• Sécurité applicative et SSDLC : risques, exigences, revues et vulnérabilités
• (mandatory) - Level: T3 - Senior - Most recent: This year

Language requirements

French (mandatory) Level Proficiency (C2)