Junior Functional Security Analyst

Nexeo; Belgique; Sur place; EUR 38 000 - 52 000; Plein temps

Résumé du poste

Nexeo is seeking a Junior Functional Security Analyst to join the cybersecurity team in Belgium. You will support addressing application security challenges and help integrate security requirements throughout the software development lifecycle.

Working with functional analysts, developers, architects and cybersecurity specialists, you will develop expertise in secure software development and application security, focusing on SDL, OWASP/NIST/ASVS and vulnerability management in Agile/DevOps

Qualifications

• Bachelor's or Master’s degree in Computer Science, Cybersecurity, Information Systems or related field, or equivalent practical experience.
• Familiar with Agile or DevOps development processes.
• Initial knowledge of Application Security principles and standards.
• Ability to translate technical topics into clear requirements and documentation.

Responsabilités

• Support the preparation of functional and technical specifications related to application security.
• Translate business needs into functional and security requirements.
• Contribute to integrating security controls throughout the application lifecycle.
• Support teams in addressing application security requirements.

Connaissances

Functional Analysis

Application Security

OWASP / NIST / ASVS

SDL

Authentication & Access Control

Security & Development Processes

Agile / DevOps

Formation

Bachelor's or Master's in CS/Cybersecurity/IS

Outils

Veracode

Jira

Git

Jenkins

Dependency-Track

Description du poste

Nexeo is currently looking for a Junior Functional Security Analyst to join the cybersecurity team of one of our clients in Belgium.

You will support the team in addressing application security challenges and contribute to integrating security requirements throughout the software development lifecycle. Working closely with functional analysts, developers, architects and cybersecurity specialists, you will develop your expertise in secure software development and application security.

? Your Responsibilities

Functional & Security Analysis

• Support the preparation of functional and technical specifications related to application security.
• Translate business and technical needs into clear functional and security requirements.
• Contribute to the integration of security controls throughout the application lifecycle.
• Support functional analysts, developers and architects in addressing application security requirements.

Secure Development Lifecycle

• Contribute to the definition and implementation of the Secure Development Lifecycle (SDL).
• Apply security best practices based on OWASP, NIST and ASVS principles.
• Support teams in integrating security practices into Agile and DevOps development processes.
• Help assess compliance with security standards, internal policies and applicable regulations.

Vulnerability Management & Security Testing

• Assist with the preparation, coordination and follow-up of application security testing.
• Monitor software vulnerabilities and identify potential security risks.
• Review vulnerability reports from internal and external source.
• Contribute to vulnerability analysis, prioritization and remediation follow-up.
• Document security findings and communicate risks to both technical and non-technical stakeholders.

Security Awareness & Continuous Improvement

• Contribute to security awareness initiatives for internal teams.
• Stay up to date with emerging vulnerabilities, threats and application security practices.
• Support continuous improvement of application security processes and procedures.
• Contribute to the development of secure software practices across the organization.

? Your Profile

• Junior profile with initial experience or strong interest in Functional Analysis, IT, Software Development or Cybersecurity.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience.
• Basic understanding of software development processes, particularly Agile or DevOps.
• Initial knowledge of Application Security principles and standards.
• Ability to understand technical topics and translate them into clear requirements and documentation.
• Strong interest in secure software development, vulnerability management and threat modeling.
• Comfortable working with developers, architects, functional analysts and cybersecurity specialists.
• Organized, analytical, detail-oriented and eager to learn.

? Technical Skills

Mandatory:

• Functional Analysis
• Application Security fundamentals
• OWASP / NIST / ASVS
• Secure Development Lifecycle (SDL)
• Basic knowledge of authentication, access control, encryption and software vulnerabilities
• Understanding of security and development processes
• Agile / DevOps fundamentals

Nice to have:

• NIS2 / NIST / ISO 27001
• SAST, DAST & SCA security testing tools, ideally Veracode
• OAuth / OpenID Connect
• Security Management Frameworks such as ISO 27001 / C2M2
• SBOM, CycloneDX or SPDX
• Vulnerability management tools such as Dependency-Track
• Vulnerability scoring methods such as CVSS / EPSS
• Threat modeling and secure software architecture
• Application security testing methodologies
• Familiarity with Jira, Git and Jenkins

? Languages

• Dutch: Active knowledge
• French: Active knowledge
• English: Active knowledge
• Ability to communicate effectively with both technical and non-technical stakeholders.

? Soft Skills

• Curious and eager to learn
• Strong analytical mindset
• Structured and detail-oriented
• Good communication skills
• Proactive and solution-oriented
• Comfortable working in multidisciplinary teams
• Able to ask questions and challenge existing practices
• Strong interest in Cybersecurity and Application Security
• Motivated to grow in a fast-evolving security environment