Functional Analyst Application Security (Freelance optional)

EngiFlex; Brussel Hoofdstad; Sur place; EUR 42 000 - 52 000; Plein temps

Avantages offerts par ce poste

Company car

Education budget

Career plan

Résumé du poste

EngiFlex is seeking a motivated Junior Functional Security Analyst to strengthen application security across our digital solutions. You will work in a multidisciplinary team with analysts, developers, architects, and cybersecurity experts to grow in secure software development and security-by-design.

Under guidance, translate business needs into functional and security requirements across the full development lifecycle, helping with SDL rollout, testing, and risk assessment.

Qualifications

• Degree or equivalent knowledge in computer science, cybersecurity, information systems or related field.
• Recent graduate or early professional experience in functional analysis, software development, IT or cybersecurity.
• Foundational understanding of Agile/DevOps and application security principles.
• Intro knowledge of security standards like OWASP, NIST, ASVS, ISO 27001 or C2M2.
• Basic grasp of authentication, access control, encryption, vulnerabilities, OAuth and OpenID.
• Willingness to learn vulnerability management, threat modeling and secure SDLC.
• Familiarity with Jira, Git and Jenkins.

Responsabilités

• Assist with functional and technical specifications related to application security.
• Contribute to defining and rolling out the Secure Development Lifecycle (SDL).
• Collaborate with development teams to integrate security controls throughout the software lifecycle.
• Help verify compliance with security standards, internal policies and regulations (NIS2, ISO 27001).
• Assist with planning and executing application security testing (SAST, DAST, SCA; Veracode knowledge is a plus).
• Monitor software vulnerabilities and assist in risk identification for applications.
• Review vulnerability reports and communicate risks to technical and non-technical stakeholders.
• Stay updated on emerging vulnerabilities and practices in application security.
• Contribute to security awareness initiatives for internal teams.

Connaissances

Agile

DevOps

OWASP

NIST

ASVS

ISO 27001

C2M2

Authentication & Access Control

Communication

Vulnerability Management

Threat Modeling

Secure SDLC

Formation

Degree in CS / Cybersecurity / IS or related

Outils

Jira

Git

Jenkins

Description du poste

Tasks and responsibilities

We are looking for a motivated Junior Functional Security Analyst with a strong interest in new technologies and application security.

You will work within a multidisciplinary team focused on strengthening application security in digital solutions. In close collaboration with functional analysts, developers, architects and cybersecurity specialists, you will build your expertise in secure software development and security-by-design.

With guidance from experienced colleagues, you will help translate business needs into clear functional and security requirements across the full application development lifecycle.

Your responsibilities include

• Supporting the preparation of functional and technical specifications related to application security.
• Contributing to the definition and rollout of the Secure Development Lifecycle (SDL), aligned with industry standards and NIST best practices.
• Working with development teams to integrate suitable security controls throughout the software lifecycle.
• Helping verify compliance with applicable security standards, internal policies and relevant regulations, including frameworks such as NIS2 and ISO 27001.
• Assisting with the preparation, coordination and follow-up of application security testing, including approaches and tools such as SAST, DAST and SCA, preferably with knowledge of Veracode.
• Monitoring software vulnerabilities and helping identify risks affecting applications.
• Reviewing vulnerability reports from internal and external sources, including vulnerability databases and security assessment tools.
• Documenting findings and communicating security risks clearly to both technical and non-technical stakeholders.
• Keeping up to date with emerging vulnerabilities, threats and application security practices.
• Contributing to security awareness initiatives for internal teams.

Your profile

You hold a degree in computer science, cybersecurity, information systems or a related field, or you have built equivalent knowledge through training or practical experience.

You may be a recent graduate or have initial professional experience in functional analysis, software development, IT or cybersecurity. You are curious, analytical, eager to learn and motivated to develop your career in application security.

We are looking for someone who

• Has a basic understanding of software development processes such as Agile or DevOps.
• Has introductory knowledge of application security principles and standards such as OWASP, NIST, ASVS, ISO 27001 or C2M2.
• Has a basic understanding of security concepts such as authentication, access control, encryption, software vulnerabilities, OAuth and OpenID.
• Can understand technical topics and translate them into clear requirements and documentation.
• Enjoys working with multidisciplinary teams including developers, architects, analysts and security specialists.
• Communicates well, both in writing and verbally.
• Works in an organized and detail-oriented way and is comfortable asking questions.
• Is willing to learn more about vulnerability management, threat modeling and secure software development.
• Has some familiarity with application lifecycle and development tools such as Jira, Git or Jenkins.
• Can work with or is interested in security management frameworks and secure development lifecycle procedures.

The following knowledge is considered an asset, but is not required

• Software Bills of Materials (SBOM) and formats such as CycloneDX or SPDX.
• Vulnerability management tools such as Dependency-Track.
• Vulnerability scoring and prioritization methods such as CVSS and EPSS.
• Threat modeling and secure software architecture principles.
• Application security testing methods and tooling.

Above all, you are enthusiastic about application security and motivated to grow in a supportive and fast-evolving environment where security is a key priority.

Languages

• Dutch
• English
• French

Offer

You will be part of a growing Belgian SME where initiative and personal development are encouraged. We will provide you with an enjoyable work environment with fun colleagues. We will work out a career plan with you, with attention and a budget for extra education/certification. You can count on an attractive salary, supplemented with extra-legal benefits, including a company car.

(Freelance is also possible)