Security Engineer

Stott and May; Brussel Hoofdstad; Hybride; EUR 110 000 - 160 000; Plein temps

Résumé du poste

Stott and May seeks an experienced Senior Cybersecurity & Automation Engineer to support vulnerability management, infrastructure security, automation, and threat landscape services across a complex hybrid enterprise. You will bridge systems administration, security tooling, and software automation, building custom API integrations and automating vulnerability lifecycles.

The role requires strong experience with Linux/Windows/ESXi, security tooling, and cloud platforms (AWS/Azure).

Qualifications

• Bachelor’s degree in Cybersecurity, Computer Science, IT, Engineering or related field.
• Minimum 6 years ICT/Cybersecurity experience (or at least 3 years in Cybersecurity plus 3+ years ICT experience).
• Active EU SECRET / SECRET-EU clearance (or equivalent).
• Must hold BOTH primary security cert and secondary engineering cert.
• English at C1 proficiency (written and spoken).

Responsabilités

• Security Automation & APIs: design and build custom scripts to automate tasks, parse security data, and connect platforms with REST APIs.
• Vulnerability Lifecycle Management: oversee end-to-end lifecycle across on‑premises and cloud environments.
• Remediation Orchestration: coordinate with infra, development, and SOC teams for patching and hardening.
• Infrastructure Security & Hardening: deploy and harden Linux, Windows Server, VMware ESXi, and network devices.
• Metrics & Reporting: prepare vulnerability reports, procedures, remediation plans, and KPI dashboards.
• Service Optimization: design and deploy infrastructure services to improve availability and scalability.

Connaissances

Python

Bash

Vulnerability management

Cloud security

Docker

Kubernetes

Threat intel

SIEM

Networking security

Formation

Bachelor's degree or higher

Outils

Rapid7 Nexpose/InsightVM

Nessus

Splunk

ServiceNow

Jira

Description du poste

Senior Cybersecurity & Automation Engineer

Role Type: Freelance / Subcontracting

Location: Hybrid / On-site (European Union)

Contract Duration: Long-term

Role Overview

We are seeking an experienced Cybersecurity & Automation Engineer to support vulnerability management, infrastructure security, automation, and threat landscape services across a complex hybrid enterprise environment.

In this role, you will bridge systems administration, security tooling, and software automation; developing custom API integrations, automating vulnerability lifecycles, and maintaining secure hybrid infrastructure.

Key Responsibilities

• Security Automation & APIs: Design and build custom scripts to automate operational tasks, parse security data, and connect security platforms with infrastructure tools via REST APIs.
• Vulnerability Lifecycle Management: Oversee the end-to-end vulnerability lifecycle (identification, assessment, prioritization, remediation tracking, and verification) across on-premises and cloud environments.
• Remediation Orchestration: Coordinate with infrastructure, development, and SOC teams to drive timely patching, configuration hardening, and security updates.
• Infrastructure Security & Hardening: Deploy, configure, manage, and harden OS platforms (Linux, Windows, VMware ESXi) and networking components (switches, routers, firewalls, VPN gateways).
• Metrics & Reporting: Prepare vulnerability assessment reports, operational procedures, remediation plans, and security metrics dashboards (KPIs, active threat tracking, risk exposure).
• Service Optimization: Design and deploy infrastructure services to improve the availability, scalability, and efficiency of cyber threat management systems.

Mandatory Requirements

Note: To be considered for this role, candidates must strictly satisfy all of the following administrative and compliance prerequisites.

• Security Clearance: Must hold an active EU SECRET / SECRET-EU security clearance (or an equivalent national secret clearance eligible for rapid validation).
• Education & Experience:
• Bachelor’s degree (minimum 3 years), Master’s, or PhD in Cybersecurity, Computer Science, IT, Engineering, or a related domain.
• Minimum 6 years of relevant professional ICT/Cybersecurity experience (or at least 3 years in Cybersecurity plus additional ICT experience totaling 6+ years).
• Certifications (Must hold BOTH):
• Primary Security Cert: (e.g., CISSP, CISM, CEH, CISA, Security+, GIAC, or equivalent).
• Secondary Technical/Engineering Cert: (e.g., AWS/Azure Security, CCNA/CCNP, RHCSA, CKA, ITIL, vendor/programming cert, or equivalent).
• Languages: English at C1 proficiency level (written and spoken).

Required Technical Expertise

• Operating Systems & Virtualization: In-depth administration and hardening of Linux, Windows Server, and VMware ESXi.
• Automation & Scripting: Advanced hands-on experience in Python and Bash for automation, data parsing, and API integrations.
• Vulnerability Management & Tooling: Direct experience with enterprise vulnerability scanners (e.g., Rapid7 Nexpose/InsightVM, Tenable Nessus), SIEM platforms (e.g., Splunk), and ITSM systems (ServiceNow, Jira).
• Network & Cloud Security: Strong understanding of TCP/IP, firewalls, VPN gateways, routing/switching, and cloud security frameworks AWS and Azure.
• Modern Infrastructure & Containers: Familiarity with containerization Docker, Kubernetes, DevSecOps pipelines, and modern attack vectors.
• Messaging Systems: Basic operational familiarity with message broker technologies (e.g., Apache Kafka, RabbitMQ, AWS SQS, or Google Pub/Sub).

Soft Skills & Professional Attributes

• Ability to collaborate effectively within an international, multicultural engineering environment.
• Proven track record of managing technical deliverables across multiple large-scale projects simultaneously.
• High degree of autonomy, discretion, and professional integrity.