Junior Functional Security Analyst

Keystone Solutions; Brussel; Sur place; EUR 42 000 - 54 000; Plein temps

Résumé du poste

Keystone Solutions seeks a motivated Junior Functional Security Analyst to join our client-site consultancy and tackle application security challenges. You will work with cross-functional teams to implement SDL and translate security requirements into clear deliverables.

You will contribute to vulnerability monitoring, risk assessment, and communication of security risks to technical and non-technical stakeholders, while expanding your knowledge of secure software development in a fast-evolving

Qualifications

• Basic understanding of software development processes (Agile/DevOps).
• Intro knowledge of application security principles (OWASP, NIST, ASVS).
• Ability to translate technical topics into clear requirements/documentation.
• Comfortable collaborating with multidisciplinary teams.
• Strong written and verbal communication skills.
• Organized, detail-oriented and eager to learn about vulnerability management and threat modeling.
• Familiarity with Jira, Git or Jenkins.

Responsabilités

• Assist in preparing functional and technical specifications for application security.
• Contribute to SDL definition and implementation based on industry standards.
• Work with development teams to integrate security controls throughout the lifecycle.
• Help verify compliance with security standards and internal policies.
• Keep up to date with vulnerabilities, threats and best practices in the field.
• Support security awareness initiatives for internal teams.
• Assist with planning, coordination and follow-up of application security testing.
• Monitor software vulnerabilities and identify risks to applications.
• Review vulnerability reports from internal and external sources.
• Document findings and communicate security risks clearly to technical and non-technical stakeholders.
• Advantage topics: SBOMs (CycloneDX/SPDX), Dependency-Track, CVSS/EPSS, ISO27001, threat modeling, SAST/DAST.

Connaissances

Functional analysis

NIS2 / NIST / ISO27001

SAST/DAST/SCA tooling

Secure development lifecycle

OWASP/OAUTH/OpenId

ISO27001 / security framework

Formation

Degree in computer science / cybersecurity / information systems

Outils

Veracode

Description du poste

Mission Overview:

We are looking for a motivated Junior Functional Security Analyst with a strong interest in new technologies and application security. This position is a consultancy mission at a client site representing Keystone Solutions. You will join a dynamic team responsible for addressing application security challenges in solutions developed for our clients. Working closely with functional analysts, developers, architects, and cybersecurity specialists, you will develop your expertise in secure software development.

Responsibilities:

• Supporting the preparation of functional and technical specifications related to application security.
• Contributing to the definition and implementation of the Secure Development Lifecycle (SDL), based on industry standards and NIST best practices.
• Working with development teams to integrate appropriate security controls throughout the application lifecycle.
• Helping verify compliance with applicable security standards, internal policies, and regulations.
• Keeping up to date with emerging vulnerabilities, threats, and application security practices.
• Contributing to security awareness initiatives for internal teams.
• Assisting with the preparation, coordination, and follow-up of application security testing.
• Monitoring software vulnerabilities and helping identify potential risks to applications.
• Reviewing vulnerability reports from internal and external sources, such as vulnerability databases and security assessment tools.
• Documenting findings and helping communicate security risks clearly to both technical and non-technical stakeholders.

Profile:

You hold a degree in computer science, cybersecurity, information systems, or a related field, or have gained equivalent knowledge through relevant training or practical experience. You may be a recent graduate or have initial professional experience in functional analysis, software development, IT, or cybersecurity. You are curious, analytical, eager to learn, and interested in building your career in application security.

We are looking for someone who:

• Has a basic understanding of software development processes, such as Agile or DevOps.
• Has introductory knowledge of application security principles and standards, such as OWASP, NIST, or ASVS.
• Is able to understand technical topics and translate them into clear requirements or documentation.
• Enjoys working with multidisciplinary teams, including developers, architects, analysts, and security specialists.
• Has good written and verbal communication skills.
• Is organized, detail-oriented, and comfortable asking questions.
• Is willing to learn about vulnerability management, secure software development, and threat modeling.
• Has a basic understanding of concepts such as authentication, access control, encryption, and software vulnerabilities.
• Has some familiarity with application lifecycle and development tools, such as Jira, Git, or Jenkins.

Knowledge of the following topics is considered an advantage, but is not required:

• Software Bills of Materials (SBOM) and tools such as CycloneDX or SPDX.
• Vulnerability management tools such as Dependency-Track.
• Vulnerability scoring and prioritization methods such as CVSS and EPSS.
• Security frameworks such as ISO 27001.
• Threat modeling and secure software architecture principles.
• Application security testing approaches and tools, including SAST and DAST.

Above all, you are enthusiastic about application security and motivated to grow in a supportive, fast-evolving environment where security plays a critical role. This role will be carried out under Keystone Solutions' consultancy model, providing you with dynamic projects, turbo-charged learning opportunities, and a commitment to your career growth. Being a

Duration:

As soon as possible - 31/12/2026 5 months (full time)

Skills required:

• Functional analysis - Level: Junior - Most recent: Any time
• NIS2 / NIST / ISO27001 - Level: Junior - Most recent: Any time
• SAST, DAST & SCA tooling (bij voorkeur met Veracode) - Level: Junior - Most recent: Any time
• Secure development lifecycle procedures - Level: Junior - Most recent: Any time
• Security (OWASP/OAUTH/OpenId/...) - Level: Junior - Most recent: Any time
• security management framework (ISO27001, C2M2, ...) - Level: Junior - Most recent: Any time

Language requirements:

Dutch
Level Active knowledge
English
Level Active knowledge
French
Level Active knowledge