Security Engineer

Stott and May Inc.; Brussel Hoofdstad; On-site; EUR 83,000 - 165,000; Full time

Job summary

Stott and May Inc. in Brussels seeks a Cybersecurity Engineer for a hybrid cloud/on-prem environment. The role focuses on automating security workflows, hardening infrastructure, managing vulnerabilities, and API integrations to reduce manual repeats.

The ideal candidate brings hands-on Python/Bash scripting, experience with Rapid7/Nessus and Splunk, and active EU SECRET clearance. Collaboration across IT Infra, DevSecOps, SOC, and vendors is essential.

Qualifications

• Minimum EQF Level 5 (Post-secondary/Associate) or higher.
• Active EU SECRET clearance (or national equivalent transferable to EU SECRET) is mandatory on start.

Responsibilities

• Automation & API Integration: Develop Python/Bash scripts to automate tasks and integrate APIs across security platforms.
• Vulnerability Lifecycle Management: Oversee identification, assessment, remediation tracking, and verification.
• Infrastructure & OS Hardening: Harden Linux/Windows/VMware ESXi and network devices.
• Remediation & Coordination: Coordinate patching and security updates with IT Infra, SOC, and vendors.
• Reporting & Metrics: Produce vulnerability reports, remediation plans, and dashboards.
• Infrastructure Resiliency: Design security services to improve availability and scalability.

Skills

Scripting & Automation

Vulnerability scanners & SIEM

OS & Virtualization

Cloud & Modern Tech Stack

Network Security

Ticketing & Workflows

Education

EQF Level 5 (Post-secondary / Associate degree)

Tools

Rapid7 Nexpose

Tenable Nessus

Splunk

Job description

• Role Type: Freelance / External Contractor
• Security Clearance: EU SECRET / SECRET UE (Mandatory)

Position Overview We are seeking a Cybersecurity Engineer to join an critical infrastructure environment in Brussels. This role combines hands-on automation, vulnerability lifecycle management, system administration, and DevSecOps practices in a hybrid cloud and on-premises ecosystem. The ideal candidate will focus on automating security workflows, hardening infrastructure, managing vulnerability exposure, and integrating tools via APIs to prevent manual recurrence of security issues.

Responsibilities

• Automation & API Integration: Develop custom internal scripts (Python, Bash) to automate tasks, analyze security data, and integrate APIs across security platforms and infrastructure tools.
• Vulnerability Lifecycle Management: Oversee identification, assessment, prioritization, remediation tracking, and verification using enterprise scanners across cloud and on-prem environments.
• Infrastructure & OS Hardening: Deploy, manage, and harden server environments (Linux, Windows, VMware ESXi) and network devices (firewalls, routers, switches, VPN gateways).
• Remediation & Coordination: Work closely with IT Infrastructure, DevOps/Cloud, SOC, Compliance, and vendors to coordinate patching, configuration changes, and security updates.
• Reporting & Metrics: Prepare comprehensive vulnerability assessment reports, remediation plans, operational procedures, dashboards, and metrics (KPIs, active threat trends, ticket trends) for management and technical teams.
• Infrastructure Resiliency: Design and deploy security services to enhance the availability, scalability, latency, and efficiency of threat management systems.

Qualifications

• Education: Minimum EQF Level 5 (Post-secondary education / Associate degree) or higher.
• Security Clearance: Active EU SECRET (or national equivalent transferable to EU SECRET) is mandatory upon start.

Required Skills

• Scripting & Automation: Strong hands-on proficiency in Python and Bash for scripting, data parsing, and API interactions.
• Vulnerability Scanners & SIEM: Practical experience with enterprise scanners (Rapid7 Nexpose, Tenable Nessus) and SIEM platforms (Splunk).
• OS & Virtualization: In-depth administration skills in Linux, Windows, and VMware ESXi.
• Cloud & Modern Tech Stack: Hands-on exposure to AWS/Azure, containerized environments (Docker, Kubernetes), DevSecOps pipelines, and message brokers (Kafka, RabbitMQ, SQS).
• Network Security: Strong understanding of TCP/IP, network protocols, firewalls, and VPN gateways.
• Ticketing & Workflows: Experience with Jira and ServiceNow.

Preferred Skills

• Programming experience in Java, Go, or Rust.

Knowledge of advanced threat intelligence frameworks and emerging attack vectors.