Functional Analyst Application Security (Freelance optional)

EngiFlex BV; Brussel Hoofdstad; Sur place; EUR 36 000 - 60 000; Plein temps

Avantages offerts par ce poste

Company car

Career plan with education/cert budget

Attractive salary with extra-legal ben

Résumé du poste

EngiFlex BV is seeking a Junior Functional Security Analyst to join our security-focused team in Belgium. You will learn secure software development and contribute to SDL, NIST, and OWASP practices within a multidisciplinary group.

You will translate business needs into clear functional and security requirements, supporting testing and vulnerability management activities and helping maintain compliance with security standards.

Qualifications

• Degree in computer science, cybersecurity, information systems or equivalent.
• Interest in application security and secure software development.
• Basic understanding of software development processes (Agile/DevOps).
• Intro knowledge of security principles and standards (OWASP, NIST, ASVS, ISO 27001).
• Ability to translate technical topics into clear requirements and docs.

Responsabilités

• Support functional and technical specs related to application security.
• Contribute to SDL rollout aligned with industry best practices.
• Work with developers to integrate security controls across the lifecycle.
• Help verify compliance with security standards and regulations (NIS2, ISO 27001).
• Assist with planning security testing using SAST/DAST/SCA; Veracode knowledge helpful.
• Monitor vulnerabilities and identify risks to applications.
• Review vulnerability reports and communicate risks clearly to all stakeholders.
• Keep up to date with threats and application security practices.
• Contribute to security awareness initiatives.

Connaissances

Agile

DevOps

OWASP

NIST

ASVS

ISO 27001

C2M2

Authentication

Access control

Documentation

Jira

Git

Jenkins

Veracode

Formation

Bachelor's degree in computer science or related

Outils

Jira

Git

Jenkins

Veracode

Description du poste

Tasks and responsibilities

We are looking for a motivated Junior Functional Security Analyst with a strong interest in new technologies and application security.

You will work within a multidisciplinary team focused on strengthening application security in digital solutions. In close collaboration with functional analysts, developers, architects and cybersecurity specialists, you will build your expertise in secure software development and security-by-design.

With guidance from experienced colleagues, you will help translate business needs into clear functional and security requirements across the full application development lifecycle.

Your responsibilities include:

• Supporting the preparation of functional and technical specifications related to application security.
• Contributing to the definition and rollout of the Secure Development Lifecycle (SDL), aligned with industry standards and NIST best practices.
• Working with development teams to integrate suitable security controls throughout the software lifecycle.
• Helping verify compliance with applicable security standards, internal policies and relevant regulations, including frameworks such as NIS2 and ISO 27001.
• Assisting with the preparation, coordination and follow-up of application security testing, including approaches and tools such as SAST, DAST and SCA, preferably with knowledge of Veracode.
• Monitoring software vulnerabilities and helping identify risks affecting applications.
• Reviewing vulnerability reports from internal and external sources, including vulnerability databases and security assessment tools.
• Documenting findings and communicating security risks clearly to both technical and non-technical stakeholders.
• Keeping up to date with emerging vulnerabilities, threats and application security practices.
• Contributing to security awareness initiatives for internal teams.

Your profile

You hold a degree in computer science, cybersecurity, information systems or a related field, or you have built equivalent knowledge through training or practical experience.

You may be a recent graduate or have initial professional experience in functional analysis, software development, IT or cybersecurity. You are curious, analytical, eager to learn and motivated to develop your career in application security.

We are looking for someone who:

• Has a basic understanding of software development processes such as Agile or DevOps.
• Has introductory knowledge of application security principles and standards such as OWASP, NIST, ASVS, ISO 27001 or C2M2.
• Has a basic understanding of security concepts such as authentication, access control, encryption, software vulnerabilities, OAuth and OpenID.
• Can understand technical topics and translate them into clear requirements and documentation.
• Enjoys working with multidisciplinary teams including developers, architects, analysts and security specialists.
• Communicates well, both in writing and verbally.
• Works in an organized and detail-oriented way and is comfortable asking questions.
• Is willing to learn more about vulnerability management, threat modeling and secure software development.
• Has some familiarity with application lifecycle and development tools such as Jira, Git or Jenkins.
• Can work with or is interested in security management frameworks and secure development lifecycle procedures.

The following knowledge is considered an asset, but is not required:

• Software Bills of Materials (SBOM) and formats such as CycloneDX or SPDX.
• Vulnerability management tools such as Dependency-Track.
• Vulnerability scoring and prioritization methods such as CVSS and EPSS.
• Threat modeling and secure software architecture principles.
• Application security testing methods and tooling.

Above all, you are enthusiastic about application security and motivated to grow in a supportive and fast-evolving environment where security is a key priority.

Languages

• Dutch
• English
• French

Offer

You will be part of a growing Belgian SME where initiative and personal development are encouraged. We will provide you with an enjoyable work environment with fun colleagues. We will work out a career plan with you, with attention and a budget for extra education/certification. You can count on an attractive salary, supplemented with extra-legal benefits, including a company car.
(Freelance is also possible)