Junior Application Security Consultant

Nviso; Belgique; Sur place; EUR 40 000 - 60 000; Plein temps

Avantages offerts par ce poste

Training budget and learning perks

Company car and Belgian fuel card

Regular team-building events

Personal coaching and career growth

Résumé du poste

NVISO is seeking a Junior Application Security Consultant to join a focused team that helps clients build and maintain secure applications by embedding security into their development lifecycle. You will grow under guidance, taking ownership of tasks and contributing to threat modeling, secure design and security maturity improvements.

You will work mainly on defensive application security, collaborating with experienced consultants and driving secure coding sessions, workshops, and security

Qualifications

• Eligibility for NATO CLEARANCE or equivalent
• Genuine interest in IT security and secure software development
• Basic understanding of architectures, development frameworks, and authentication (OAuth, OpenID Connect)
• Hands-on coding experience is a plus but not mandatory
• Exposure to build/CI-CD tools (Jenkins, Azure DevOps/TFS, Maven)
• Foundational knowledge of SDLC and security requirements, design, testing

Responsabilités

• Assist in threat modeling activities by analyzing architectures, data flows, assets and trust boundaries
• Lead workshops with developers, product owners, and architects to explore attacker scenarios
• Participate in application and software architecture security reviews
• Support maturity assessments (e.g. OWASP SAMM, DSOMM, CyFun) and identify improvement priorities
• Assist in planning and executing technical security tests and penetration tests
• Map test results to threats and risk scenarios for senior consultants
• Contribute to security awareness and secure coding sessions

Connaissances

Threat modeling

Application security

Security testing

Communication

Client interaction

English proficiency

Outils

Jenkins

Azure DevOps

Maven

Description du poste

It all starts with the mission: NVISO is here to protect European society from potentially devastating cyber attacks! This means we offer cyber security services to private and governmental organizations to help them better prepare for, prevent, detect and respond to cyber security incidents.

All of this is built on four fundamental values that define who we are: We are Proud, We Break Barriers, We Care and No BS!

What will you do?

As a Junior Application Security Consultant, you will join a team focused on helping clients build and maintain secure applications by integrating security into their development lifecycle. You will work closely with experienced consultants and progressively take ownership of tasks as your skills grow.

Your role is strongly oriented towards the defensive side of application security, with a particular focus on threat modeling, secure design, and security maturity improvements.

Projects you will contribute to include:

• Supporting threat modeling activities by helping analyze architectures, data flows, assets, trust boundaries, and security assumptions together with senior consultants.
• Participating and also lead workshops with developers, product owners, and architects to identify and understand how an attacker would carry out malicious actions on one or more systems of any kind (IoT, OT, IT, etc.).
• Contributing to application and software architecture security reviews.
• Supporting maturity assessments (e.g. OWASP SAMM, DSOMM, CyFun) and helping clients understand their current maturity and improvement priorities.
• Assisting in the preparation of technical security tests and penetration tests based on the identified threats, including helping define test scopes, relevant attack paths, and security assumptions to be validated.
• Supporting senior consultants during technical testing activities by mapping test results back to identified threats and risk scenarios.
• Helping prepare and deliver security awareness or secure coding sessions with other experts.

You will always be supported by senior team members and progressively gain autonomy as your understanding of application security, threat modeling, and consulting grows.

Requirements

• Eligibility for NATO CLEARANCE (details here );
• You have a genuine interest in IT security and secure software development.
• Basic understanding of application architectures, development frameworks, and authentication mechanisms (e.g. OAuth, OpenID Connect).
• Some familiarity with development practices and programming concepts; hands‑on coding experience is a plus but not mandatory.
• Initial exposure to build and CI/CD tools (e.g. Jenkins, Azure DevOps/TFS, Maven, or similar).
• Foundational knowledge of the Secure Development Lifecycle (SDLC) and an interest in how security requirements, design, and testing fit into it.
• Awareness of common application security risks and vulnerabilities (e.g. OWASP Top 10).
• Interest in application threat modeling, secure architecture, and identifying design or business logic flaws under guidance.
• Ability to communicate clearly with technical stakeholders and willingness to develop confidence when interacting with clients.
• Positive, team- and mission-oriented attitude.
• Strong interpersonal and verbal/written communication skills, enabling effective collaboration in a consulting environment.
• Excellent English communication skills, both verbal and written; Dutch and/or French is a plus.
• You are ambitious, curious, and motivated to help clients improve their security posture.
• You are willing to learn and become a better version of yourself, everyday;
• Candidates must recognize and deal appropriately with confidential and sensitive information

What do we offer

At NVISO, we care. We are committed to offering you a highly competitive remuneration package including financial and non-financial components:

• A training budget of 10.000€ and 10 days every 2 years
• Company car and Belgian fuel card
• Working and learning from the best people in the European cyber security industry. We have multiple SANS Instructors working at NVISO, our staff has presented at popular hacking conferences (BlackHat, BruCON, OWASP, etc) and all of our technical staff can acquire deep technical security certifications (GSE, GXPN, GREM, GCFA, OSCP, etc)
• An entrepreneurial and agile working environment, where you will be challenged, stimulated and supported in driving new initiatives (either through internal innovation or by improving our service offering), without losing sight of having fun!
• Regular team-building and fun events throughout the year;
• Our commitment to coach and counsel you and help you grow; each employee receives a personal coach within the team, whose role is to ensure your well-being and helps you grow in your career!
• Flexible working hours, working from home and even the possibility to work from abroad;
• Flex Income Plan
• 32 paid leave days