Junior Functional Security Analyst

Nexeo; Brussel Hoofdstad; Sur place; EUR 30 000 - 42 000; Plein temps

Résumé du poste

Nexeo is seeking a Junior Functional Security Analyst to join the cybersecurity team in Belgium. You will support the team in addressing application security challenges and help integrate security requirements across the software lifecycle.

You will work with functional analysts, developers, architects and cybersecurity specialists to develop expertise in secure software development and application security, in a fast-evolving security environment.

Qualifications

• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems or related field, or equivalent practical experience.
• Initial knowledge of Application Security principles and standards.
• Basic understanding of software development processes, particularly Agile or DevOps.

Responsabilités

• Support the preparation of functional and technical specifications related to application security.
• Translate business and technical needs into clear functional and security requirements.
• Contribute to the integration of security controls throughout the application lifecycle.
• Assist with preparation, coordination and follow-up of application security testing.
• Document security findings and communicate risks to stakeholders.

Connaissances

Functional Analysis

Application Security

Vulnerability Management

Threat Modeling

Security Awareness

Agile / DevOps collaboration

Formation

Bachelor’s or Master’s degree in Computer Science or Cybersecurity

Outils

Jira

Git

Jenkins

Veracode

Description du poste

Nexeo is currently looking for a Junior Functional Security Analyst to join the cybersecurity team of one of our clients in Belgium.

You will support the team in addressing application security challenges and contribute to integrating security requirements throughout the software development lifecycle. Working closely with functional analysts, developers, architects and cybersecurity specialists, you will develop your expertise in secure software development and application security.

Functional & Security Analysis

• Support the preparation of functional and technical specifications related to application security.
• Translate business and technical needs into clear functional and security requirements.
• Contribute to the integration of security controls throughout the application lifecycle.
• Support functional analysts, developers and architects in addressing application security requirements.

Secure Development Lifecycle

• Contribute to the definition and implementation of the Secure Development Lifecycle (SDL).
• Apply security best practices based on OWASP, NIST and ASVS principles.
• Support teams in integrating security practices into Agile and DevOps development processes.
• Help assess compliance with security standards, internal policies and applicable regulations.

Vulnerability Management & Security Testing

• Assist with the preparation, coordination and follow-up of application security testing.
• Monitor software vulnerabilities and identify potential security risks.
• Review vulnerability reports from internal and external sources.
• Contribute to vulnerability analysis, prioritization and remediation follow-up.
• Document security findings and communicate risks to both technical and non-technical stakeholders.

Security Awareness & Continuous Improvement

• Contribute to security awareness initiatives for internal teams.
• Stay up to date with emerging vulnerabilities, threats and application security practices.
• Support continuous improvement of application security processes and procedures.
• Contribute to the development of secure software practices across the organization.
• Junior profile with initial experience or strong interest in Functional Analysis, IT, Software Development or Cybersecurity.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience.
• Basic understanding of software development processes, particularly Agile or DevOps.
• Initial knowledge of Application Security principles and standards.
• Ability to understand technical topics and translate them into clear requirements and documentation.
• Strong interest in secure software development, vulnerability management and threat modeling.
• Comfortable working with developers, architects, functional analysts and cybersecurity specialists.
• Organized, analytical, detail-oriented and eager to learn.

Mandatory:

• Functional Analysis
• Application Security fundamentals
• OWASP / NIST / ASVS
• Secure Development Lifecycle (SDL)
• Basic knowledge of authentication, access control, encryption and software vulnerabilities
• Understanding of security and development processes

Nice to have:

• NIS2 / NIST / ISO 27001
• SAST, DAST & SCA security testing tools, ideally Veracode
• OAuth / OpenID Connect
• Security Management Frameworks such as ISO 27001 / C2M2
• SBOM, CycloneDX or SPDX
• Vulnerability management tools such as Dependency-Track
• Vulnerability scoring methods such as CVSS / EPSS
• Threat modeling and secure software architecture
• Application security testing methodologies
• Familiarity with Jira, Git and Jenkins
• Dutch: Active knowledge
• French: Active knowledge
• English: Active knowledge
• Ability to communicate effectively with both technical and non-technical stakeholders.
• Curious and eager to learn
• Strong analytical mindset
• Structured and detail-oriented
• Proactive and solution-oriented
• Comfortable working in multidisciplinary teams
• Able to ask questions and challenge existing practices
• Strong interest in Cybersecurity and Application Security
• Motivated to grow in a fast-evolving security environment