Security Auditor

Vivid Resourcing Ltd; Antwerpen; Hybride; EUR 61 000 - 73 000; Plein temps

Avantages offerts par ce poste

Hybrid working model

Modern Mechelen office

Company car or mobility budget

Résumé du poste

Vivid Resourcing Ltd is a Brussels-based fast-growing B2B product and technology organisation seeking an experienced Application Security Engineer. You will audit and test web, API, mobile, and cloud apps in a hybrid Belgium setting, collaborating with software engineers, product teams and business stakeholders.

The role offers hands-on work with Burp Suite, OWASP ZAP, Snyk, Checkmarx and cloud platforms (Azure/AWS/GCP).

Qualifications

• 2-5 years of experience in application security or security-focused engineering.
• Strong knowledge of OWASP Top 10 and secure coding practices.
• Hands-on experience with security testing tools such as Burp Suite, OWASP ZAP, SonarQube, Snyk, Checkmarx or similar.
• Experience with Azure, AWS or GCP and cloud security best practices.
• Familiarity with Docker, Git and CI/CD, and ideally Kubernetes and infrastructure-as-code security.
• Relevant certifications such as OSCP, CEH, GWAPT, CISSP or CSSLP are a plus.

Responsabilités

• Conduct security audits, code reviews and penetration tests across web, API, mobile and cloud-based applications.
• Identify, assess and prioritise vulnerabilities (OWASP Top 10, CWE), and give development teams clear, practical remediation guidance.
• Embed security into the SDLC and CI/CD pipelines through SAST, DAST, SCA and secrets-scanning tools.
• Perform threat modelling and security architecture reviews for new products and features.
• Support compliance and audit readiness against standards such as ISO 27001, SOC 2 and GDPR, and report findings and risk clearly to technical and business stakeholders.

Connaissances

Application security

Security auditing

Penetration testing

Communication

Collaborative mindset

Outils

Burp Suite

OWASP ZAP

SonarQube

Snyk

Checkmarx

Cloud security (Azure/AWS/GCP)

Docker

Git

CI/CD

Kubernetes

IaC security

Description du poste

The company you’ll be joining is a fast-growing B2B product and technology organisation based in Brussels, building secure, data-driven solutions that help businesses operate more efficiently and make better decisions.

Responsibilities

• Conduct application security audits, code reviews and penetration tests across web, API, mobile and cloud-based applications.
• Identify, assess and prioritise vulnerabilities (OWASP Top 10, CWE), and give development teams clear, practical remediation guidance.
• Embed security into the SDLC and CI/CD pipelines through SAST, DAST, SCA and secrets-scanning tools.
• Perform threat modelling and security architecture reviews for new products and features.
• Support compliance and audit readiness against standards such as ISO 27001, SOC 2 and GDPR, and report findings and risk clearly to technical and business stakeholders.

Your Profile

• 2-5 years of experience in application security, security auditing, penetration testing or a similar security-focused engineering role.
• Strong knowledge of secure coding practices and common vulnerabilities (OWASP Top 10, API security, authentication and authorisation flaws).
• Hands‑on experience with security testing tools such as Burp Suite, OWASP ZAP, SonarQube, Snyk, Checkmarx or similar.
• Practical experience with Azure, AWS or GCP and cloud security best practices.
• Familiarity with Docker, Git and CI/CD, and ideally Kubernetes and infrastructure-as-code security.
• Comfortable working in a product‑led, agile environment and collaborating with software engineers, product teams and business stakeholders.
• Relevant certifications such as OSCP, CEH, GWAPT, CISSP or CSSLP are a plus.
• Experience with B2B products, SaaS or regulated environments is a plus.
• Strong communication skills and a collaborative, pragmatic mindset.

What’s on Offer

• Salary of up to €6,000 gross per month, depending on experience.
• Company car or mobility budget.
• Hybrid working model with a modern office environment in Mechelen.
• Meal vouchers, group insurance and hospitalisation insurance.
• Ongoing technical training and certification support, including security certifications.
• Clear career progression towards Senior Application Security Engineer, Security Architect or Head of Security.
• The chance to work with modern security tooling and cloud technologies across Azure, AWS and GCP.
• A direct impact on the security posture of a growing B2B technology product.
• A collaborative, technically ambitious environment where security is part of the product and business strategy.