Security Engineer

Huxley; Brussel; Presencial; EUR 45.000 - 70.000; Jornada completa

Descripción de la vacante

Huxley’s Belgium-based client in the banking sector seeks a junior/medior Security Engineer to strengthen cyber defence, focusing on preventive security across IT domains and applications.

You will work with risk analysis, vulnerability management, and secure coding advisory while collaborating with stakeholders and leveraging cloud tooling across Azure, AWS, and GCP.

Formación

• 2 to 5 years of experience in an IT technical role focused on cybersecurity and threat detection.
• Proven experience working in a SOC, threat detection team or similar security operations environment.
• Fluent in English; Dutch is a strong plus.

Responsabilidades

• Conduct in-depth risk assessments, patch and vulnerability management, and identify weaknesses across systems and applications.
• Perform security assessments on web applications and APIs, detecting issues such as SQL Injection, XSS, CSRF and Clickjacking.
• Advise development teams on secure coding practices and follow up on implementation of security policies and best practices.
• Analyze log data to uncover anomalies, investigate incidents, and contribute to forensic analysis and incident response plans.
• Use scripting (Python, Bash), front-end and back-end skills (HTML, JavaScript, CSS), browser DevTools, RESTful APIs and SQL to support security analysis.
• Apply familiarity with Azure, AWS, GCP and optionally SCA, SAST, DAST, VMDR tooling to strengthen preventive security.
• Demonstrate strong analytical skills, sound decision making, and take ownership of issues from detection through resolution.
• Work closely with cross-department stakeholders, communicate clearly with technical and non-technical audiences, and act as Security Champion for specific technologies.

Conocimientos

Risk & Vulnerability Analysis

Web Application Security

Secure Coding Advisory

Threat Detection & Log Analysis

Technical Expertise

Cloud & Tooling Knowledge

Analytical & Ownership Mindset

Collaboration & Communication

Herramientas

Azure

AWS

GCP

SCA

SAST

DAST

VMDR

DevTools

Descripción del empleo

Security Engineer - Cyber Security Specialist / Analyst (Junior/Medior)

Our client, a leading player in the banking sector in Belgium, is looking for a junior/medior Security Engineer to strengthen their cyber defence capabilities. In this role, you will focus on preventive security solutions across a wide spectrum of IT domains, helping protect critical applications, infrastructure and business processes against evolving cyber threats.

Profile

• 2 to 5 years of experience in an IT technical role with a focus on cybersecurity and threat detection.
• Proven experience working in a SOC, threat detection team or similar security operations environment.
• Fluent in English; Dutch is a strong plus.

Key Skills & Responsibilities

• Risk & Vulnerability Analysis - Conduct in-depth risk assessments, patch and vulnerability management, and identify weaknesses across systems and applications.
• Web Application Security - Perform security assessments on web applications and APIs, detecting issues such as SQL Injection, XSS, CSRF and Clickjacking.
• Secure Coding Advisory - Advise development teams on secure coding practices and follow up on implementation of security policies and best practices.
• Threat Detection & Log Analysis - Analyze log data to uncover anomalies, investigate incidents, and contribute to forensic analysis and incident response plans.
• Technical Expertise - Use scripting (Python, Bash), front-end and back-end skills (HTML, JavaScript, CSS), browser DevTools, RESTful APIs and SQL to support security analysis.
• Cloud & Tooling Knowledge - Apply familiarity with Azure, AWS, GCP and optionally SCA, SAST, DAST, VMDR tooling to strengthen preventive security.
• Analytical & Ownership Mindset - Demonstrate strong analytical skills, sound decision making, and take ownership of issues from detection through resolution.
• Collaboration & Communication - Work closely with cross-department stakeholders, communicate clearly with technical and non-technical audiences, and act as Security Champion for specific technologies.