Security Analyst

Next Ventures; Brussel; Sur place; EUR 90 000 - 150 000; Plein temps

Résumé du poste

Next Ventures in Brussels is supporting a global financial services organisation operating critical financial infrastructure. The role strengthens the Cyber and Information Security team through risk assessments, secure-by-design requirements, architecture reviews and security testing across an international environment.

The successful candidate will collaborate with business owners, project managers, risk teams, auditors, engineers and developers to translate security needs into practical

Qualifications

• At least three years of cybersecurity experience; senior roles may require ten+ years across multiple domains.
• Strong experience in application and infrastructure security, risk assessments or security architecture.
• Knowledge of IAM, IDaaS, PKI, federation, secure access management and data protection.
• Understanding of application security, OWASP, code-scanning tools, CI/CD pipelines and security automation.
• Experience with cloud technologies (IaaS, PaaS, SaaS), virtualization, networks and IaC.
• Excellent communication skills to explain risks to business and technical teams.

Responsabilités

• Perform security risk assessments and translate policies into technical requirements.
• Advise on secure design, implementation and testing of applications and infrastructure.
• Review architectures against security requirements and secure-by-design principles.
• Define security testing needs and penetration testing scopes; support testing teams and review reports.
• Develop security standards and documented security services.
• Act as SME across IAM, PKI, cryptography, network cloud and application security.

Connaissances

Security risk assessments

Cloud security

Application security

Security architecture

CI/CD security

Communication skills

Formation

Degree in Computer Science or related

CISSP

GIAC

ISO 27001 Lead Auditor

SABSA

Outils

IDaaS

PKI

SAST/Code scanning tools

Description du poste

We are supporting a global financial services organisation operating critical financial infrastructure that is looking to strengthen its Cyber and Information Security team in Brussels.

The successful candidate will support business and IT projects through security risk assessments, secure-by-design requirements, architecture reviews and security testing. You will work with business owners, project managers, risk teams, auditors, engineers, developers and architects across an international environment.

Key Responsibilities

• Perform security risk assessments and translate policies, controls and business needs into clear technical security requirements.
• Advise on the secure design, implementation and testing of applications and infrastructure.
• Review architectural designs and validate them against security requirements and secure-by-design principles.
• Define security testing requirements and penetration-testing scopes, support testing teams and review final reports.
• Develop security standards, technical principles and documented security services.
• Act as a subject-matter expert across areas such as IAM, PKI, cryptography, network security, cloud security or application security.

Experience Required

• At least three years of cybersecurity experience, with senior candidates expected to have ten or more years across multiple security domains.
• Strong experience in application security, infrastructure security, security risk assessments or security architecture.
• Knowledge of IAM, IDaaS, PKI, federation, secure access management, data protection, endpoint security or network security.
• Understanding of application security, OWASP, code-scanning tools, CI/CD pipelines and security automation.
• Experience with cloud technologies, including IaaS, PaaS and SaaS, alongside virtualisation, networks, databases or infrastructure as code.
• Strong communication skills with the ability to explain security risks and recommendations to both senior business stakeholders and technical teams.

Preferred Qualifications

• Degree in Computer Science, Engineering or a related discipline.
• Certifications such as CISSP, GIAC, SABSA, ISO 27001 Lead Auditor or Lead Implementer.
• Security-related product certifications would be advantageous.
• Experience working within financial services, critical infrastructure or another highly regulated environment.
• Strong documentation, presentation, analytical and organisational skills.
• Fluent English and the ability to work effectively within an international, multicultural environment.