Security Architect

Altia; Brussel Hoofdstad; On-site; EUR 90,000 - 140,000; Full time

Benefits offered by this job

Team player culture

Flexible autonomy

Job summary

ALTIA is seeking a Senior IT Security Architect to join the Compass Corporate programme, a multi-tenant SaaS platform. The role covers security architecture, application and infrastructure security, vulnerability management and security incidents in a Java microservices, Kubernetes and AWS environment with a weekly release cadence.

Key responsibilities include designing security architectures, threat models, security requirements, release criteria, DevSecOps in CI/CD, vulnerability remediation,

Qualifications

• Security architecture for distributed, microservice-based and multi-tenant platforms.
• OWASP Top 10 and ASVS; Java and JavaScript/TypeScript application and REST API security; Burp Suite.
• DevSecOps: GitLab CI/Jenkins, SonarQube, SAST, DAST, SCA, container-image scanning and secret detection.
• AWS security: IAM, KMS/CloudHSM, WAF, Shield, posture management and network segmentation.
• Kubernetes/Amazon EKS security, including RBAC, workload/pod security, network policies, Helm and container security.
• IAM protocols and corporate identity integration: OpenID Connect, OAuth 2.0, SAML and EU Login.
• HashiCorp Vault, CyberArk, certificate lifecycle and encryption-key management.
• Security of Kafka, Redis, Elasticsearch/OpenSearch, Consul, PostgreSQL/Aurora and Oracle.
• Incident response, digital forensics, MITRE ATT&CK, ISO 27001, PCI-DSS, CIS benchmarks and GDPR.
• Python security automation, Terraform and Ansible; security of AI/LLM-enabled applications.

Skills

Security architecture

OWASP Top 10

ASVS

Java security

JavaScript/TypeScript security

REST API security

Burp Suite

DevSecOps

CI/CD pipelines

SAST/DAST/SCA

Container security

AWS security

IAM

Kubernetes security

OpenID Connect

OAuth 2.0

SAML

EU Login

HashiCorp Vault

CyberArk

certificate management

encryption-key management

Kafka security

PostgreSQL

GDPR

MITRE ATT&CK

ISO 27001

PCI-DSS

CIS benchmarks

Python security automation

Terraform

Ansible

Tools

Burp Suite

GitLab CI

Jenkins

SonarQube

Terraform

Ansible

Job description

Looking for your next professional challenge as IT Security Architect?

We have an opportunity that might be just what you are looking for!

About Us

At ALTIA, we are a team of more than 4,200 professionals across 30 locations in 10 countries.

We design and develop innovative digital solutions for over 1,000 organizations that drive transformation and progress.

Our purpose: to grow by helping others grow - sustainably and responsibly.

Our values: commitment, closeness, innovation, and collaboration - guide us every step of the way.

Learn more at www.altiacompany.com

WHAT WE ARE LOOKING FOR:

The consultant will act as a Senior Security Architect within the Compass Corporate programme, a multi-tenant SaaS business-process management platform. The role covers security architecture, application and infrastructure security, vulnerability management and security incidents in a Java microservices, Kubernetes and AWS environment with a weekly release cadence.

Key responsibilities include designing security architectures and threat models; defining security requirements and release acceptance criteria; operating DevSecOps controls in CI/CD pipelines; managing vulnerabilities and remediation; conducting application, API, cloud and container security assessments; hardening AWS and Amazon EKS environments; designing IAM, secrets, key and certificate-management controls; supporting incident response with CERT/SOC teams; producing security posture and compliance reporting; and assessing AI-based features for threats such as prompt injection and data leakage.

WHAT WE OFFER:

• Participation in an international and innovative project.
• A technical and collaborative environment with real impact.
• Career growth opportunities and continuous learning.
• Flexibility and autonomy, working with cutting-edge technologies.
• Team player culture within an agile, people-centered company.

Interested in joining a global, forward-thinking engineering team?

We would love to meet you!

This job offer has been drafted with impartiality and non-discrimination on the basis of gender, race, ideology or any other grounds in mind. In particular, it complies with current regulations on gender equality between women and men (Royal Decree-Law 6/2019)

Minimum Requirements

Required technical knowledge

• Security architecture for distributed, microservice-based and multi-tenant platforms.
• OWASP Top 10 and ASVS; Java and JavaScript/TypeScript application and REST API security; Burp Suite.
• DevSecOps: GitLab CI/Jenkins, SonarQube, SAST, DAST, SCA, container-image scanning and secret detection.
• AWS security: IAM, KMS/CloudHSM, WAF, Shield, posture management and network segmentation.
• Kubernetes/Amazon EKS security, including RBAC, workload/pod security, network policies, Helm and container security.
• IAM protocols and corporate identity integration: OpenID Connect, OAuth 2.0, SAML and EU Login.
• HashiCorp Vault, CyberArk, certificate lifecycle and encryption-key management.
• Security of Kafka, Redis, Elasticsearch/OpenSearch, Consul, PostgreSQL/Aurora and Oracle.
• Incident response, digital forensics, MITRE ATT&CK, ISO 27001, PCI-DSS, CIS benchmarks and GDPR.
• Python security automation, Terraform and Ansible; security of AI/LLM-enabled applications.