Hybrid SALM Security Analyst - Application Risk & Go-Live

Abakus IT-Solutions; Namen; Hybride; EUR 60 000 - 85 000; Plein temps

Résumé du poste

Abakus IT-Solutions is seeking a medior Secure Application Lifecycle Management (SALM) specialist to manage risk, security controls and requirements across the full application lifecycle for a Belgian public administration.

You will support projects from initial classification through go-live, ensuring traceable decisions, proper risk mitigation and alignment with SALM standards. Hybrid work with on-site presence encouraged where needed.

Qualifications

• Threat modelling methods and frameworks: OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 and CyFun.
• Clear communication of security topics to project managers, architects, developers, business units and suppliers.
• Documentation, decision traceability and use of tracking or GRC tools.
• Analytical thinking to structure complex situations and identify priority risks.
• Autonomy to handle several cases in parallel.
• Collaboration with DevSecOps, operations and suppliers.

Responsabilités

• Support projects from initial classification through to go-live.
• Define SALM path and applicable controls.
• Carry out or support risk analyses and threat modelling.
• Prioritize scenarios, measures and residual risks.
• Take part in architecture, design and data flow reviews.
• Define and verify application security requirements.
• Advise project managers, architects, developers, business units and suppliers.
• Track recommendations, exceptions, evidence and decisions.
• Compile the SALM opinion before go-live and escalate significant risks.

Connaissances

Application risk analysis

Threat modelling

Communication with stakeholders

GRC tools

Threat modelling methods

OWASP

STRIDE

ISO 27005

NIST SSDF

NIS2 & CyFun

Documentation & traceability

Autonomy

Collaboration

Analytical thinking

Pragmatism

Teaching security concepts

Rigour

Outils

GRC tools

Tracking tools

Description du poste

Abakus IT-Solutions is seeking a medior Secure Application Lifecycle Management (SALM) specialist to manage risk, security controls and requirements across the full application lifecycle for a Belgian public administration.

You will support projects from initial classification through go-live, ensuring traceable decisions, proper risk mitigation and alignment with SALM standards. Hybrid work with on-site presence encouraged where needed.