Security Engineer,

Elia Group; Brussel Hoofdstad; Hybrid; EUR 75,000 - 110,000; Full time

Benefits offered by this job

Year-end bonus

Meal vouchers

Insurance package

Vacation entitlement

Job summary

Elia Group in Brussels is seeking a Senior Security Engineer to reinforce its Group Engineering team. You will embed security across the software development lifecycle, combining SecOps, application security and governance with AI risk awareness.

You will champion Secure‑by‑Design, integrate SAST/DAST, SCA, container scanning and IaC checks into CI/CD, own vulnerability management for application findings, and collaborate with engineering, OT/IT operations, and compliance teams.

Qualifications

• Master’s degree in IT, Business Administration, Engineering, or relevant equivalent experience.
• Minimum 5 years of combined experience in application security and/or security operations, preferably in regulated environments.
• Deep familiarity with OWASP ASVS, WSTG, SAMM and OWASP LLM Top 10 frameworks.
• Proficiency in at least two scripting/programming languages (e.g., Python, Bash, Java, .NET, Go).
• Experience integrating security tooling into CI/CD pipelines and working within Agile/SAFe delivery models.
• Knowledge of application security, secure SDLC, SAST/DAST tooling, threat modelling, code review, API security and AI/LLM security.
• Experience collaborating with software engineering and governance/compliance functions.
• Fluency in English; Dutch/French/German a plus.

Responsibilities

• Champion a Secure‑by‑Design culture and run threat modelling for applications, platforms, AI/LLM services and major changes.
• Integrate SAST, DAST, SCA, container scanning and IaC security checks into CI/CD pipelines as needed.
• Own the vulnerability management lifecycle for application findings, including severity classification and remediation tracking.
• Triage and contextualise findings from automated tools to reduce noise and prioritise risks.
• Provide hands‑on secure code review and security validation of AI‑generated code when requested.
• Maintain and evolve security guidelines covering OWASP Top 10, OWASP LLM Top 10 and CWE mitigations.
• Advise on security architecture including API gateway hardening, secrets management and zero‑trust segmentation.
• Act as interface between IT security and Engineering teams; support SOC and IT security as needed.
• Support security incidents involving application‑layer attacks and translate findings into hardening tasks.

Skills

Security engineering

Threat modelling

CI/CD integration

OWASP frameworks

AI/LLM security

Communication

Executive risk reporting

Education

Master’s degree in IT or related field

Tools

SAST

DAST

SCA

IAC/ IaC security checks

CI/CD security tooling

Job description

Excited to work for a key Belgian player in the energy landscape?

The Belgian and European energy landscape is in full swing. Did you know that Elia Belgium plays a crucial role in this? As part of Elia Group, a European transmission system operator, Elia Belgium ensures the reliability and sustainability of the electricity supply in our country.

Side‑side with your talented colleagues, you will play a part in building a sustainable, green and reliable energy infrastructure that stimulates economic growth and reduces our ecological footprint.

Only together can we make the biggest impact possible! We believe in the power of diversity we are convinced that an inclusive and diverse work environment leads to more innovation, creativity and better results.

Security Engineer

Requisition ID 11329

Posting Start Date 12/08/2026

Function

We are looking for an experienced Security Engineer – SecOps & Application Security to strengthen our Group Engineering team in Brussels. This is a senior security engineering role that merges Security Operations depth, Application Security engineering expertise and Security Architecture and Governance experience. You will be a trusted security partner to our application engineering, platform, and OT/IT operations teams, embedding security throughout the entire Software Development Lifecycle.

As Elia Group embeds AI into engineering products and faces increasingly AI-powered adversaries, you will also help secure both the AI systems we build and detect the AI‑accelerated attacks we face.

As Security Engineer, you will

• Champion a Secure‑by‑Design culture and run threat modelling for applications, platforms, AI/LLM‑infused services, and major changes.
• Integrate security checks such as SAST, DAST, SCA, container scanning and IaC security checks into CI/CD pipelines whenever needed.
• Own the vulnerability management lifecycle for application‑layer findings, including severity classification, remediation SLAs and tracking through to closure.
• Triage and contextualise findings from automated tools to eliminate noise and prioritise exploitable risk.
• Provide hands‑on secure code review and security validation of AI‑generated code where requested.
• Maintain and evolve security guidelines covering OWASP Top 10, OWASP LLM Top 10 and CWE mitigations, tailored to Elia Engineering and IT Security standards.
• Drive risk‑based prioritisation for security‑related issues picked up during SDLC activities and security monitoring activities.
• Act as an interface/internal consultant between the IT security teams and the Engineering teams.
• Advise on security architecture, including API gateway hardening, secrets management, OAuth 2.0/OIDC implementations and zero‑trust network segmentation.
• Be a point of contact for the SOC and IT Security teams, providing application/engineering security support where needed.
• Support security incidents involving application‑layer attacks and translate findings into hardening tasks for engineering teams.
• Support security initiatives in the organisation, including input into pentesting scope and validating findings with engineering teams.

Your Profile

• Master’s degree in IT, Business Administration, Engineering, or relevant equivalent experience
• Minimum of 5 years of combined experience in application security and/or security operations roles, preferably with at least 2 years in a KRITIS, financial services, or similarly regulated environment.
• Deep familiarity with OWASP ASVS, WSTG, SAMM and OWASP LLM Top 10 frameworks.
• Proficiency in at least two scripting/programming languages such as Python, Bash, Java, .NET, Go or similar.
• Practical experience integrating security tooling into CI/CD pipelines and working within Agile/SAFe delivery models.
• Knowledge of application security, secure SDLC, SAST/DAST tooling, threat modelling, code review, API security and AI/LLM application security.
• Experience working with both software engineering teams and governance/compliance functions.
• Experience using risk frameworks as a means to drive action.
• Strong communication skills, including executive risk reporting, developer coaching and stakeholder management.
• You are fluent in English. Knowledge of Dutch, French and/or German is a plus.

Nice to have

• Certifications such as OSEP, GPEN, AWS/Azure Security Specialty, GXPN, CISM or CISSP.
• Experience with SIEM platforms, writing detection logic and familiarity with MITRE ATLAS for AI/ML threat modelling.
• Familiarity with OT/ICS security or energy sector technology stacks.
• Working proficiency in German or French; English is the working language of IT functions.

Offer

• Salary a competitive salary package, allowance for representation expenses, year‑end bonus, double vacation pay, meal vouchers (€10 per working day), eco‑vouchers, sport & culture vouchers, bonuses based on individual and group results.
• Insurance group insurance, hospitalisation insurance, ambulant care insurance for the whole family and also personal accident insurance.
• Vacation You will be entitled to 20 vacation days and 5 additional vacation days, 6 local days, 4 exempt days (after 1 year of employment) and up to 5 long‑service days (1 day for every 3 years in employment).
• Social fund Year‑end vouchers, birth and marriage allowance. We will also cover part of the cost of glasses, a dental prosthesis or similar needs.
• Communication you will be given an iPhone, a phone subscription (for work and private use) and a laptop with internet reimbursement.
• Discounts you will enjoy a 30% discount on your gas and electricity bill.
• Mobility we will offer you a company car and public transport or a mobility budget.
• Elia shares Elia will give you the opportunity to subscribe to shares with a discount of 16.66% on the average share price.

Location

• Main working location will be in Brussels, Empereur. (Close to the central station) + Homeworking

There’s something electric in the air with this job offer!

In exchange for your work and dedication, you enjoy the following benefits

• A job full of variety with a top employer Elia encourages innovation and collaboration. Within our company you will be at the forefront of the energy transition, and you will have the chance to contribute to ground‑breaking technologies designed to accelerate this transition. It is a one‑of‑a‑kind opportunity to further develop your knowledge and skills.
• Focus on personal growth and well‑being at work Discover a wide range of professional training and coaching opportunities that are guaranteed to give your personal growth a solid boost. At the same time, as a top employer, we put maximum effort into a positive work culture in which your well‑being is central.
• Development opportunities for a challenging career At Elia, we encourage you to seek out and seize new professional opportunities. You will enjoy complete freedom to shape your career on your own terms.
• A diverse team of passionate colleagues Elia puts a high value on diversity and inclusion. You will join a diverse and passionate team that enjoys sharing knowledge and leading the way towards a more sustainable future together.

These are just a few of the benefits that distinguish Elia as a Top Employer. We are convinced that your contribution to our team will be invaluable and look forward to welcoming you soon!