Senior Application Security Advisor | SSDLC & GRC Leader

Orange Cyberdefense Group; Antwerpen; On-site; EUR 90,000 - 130,000; Full time

Benefits offered by this job

Vacation days 32 (37 with Benefit plan

Meal vouchers

Hospitalization & group insurance

Company laptop

Mobile phone with unlimited use

Training & certifications

Job summary

Orange Cyberdefense Group is seeking a Senior Application Security Consultant to guide security across the SSDLC for complex applications. You will translate technical risks into business-focused recommendations, lead assessments, and mentor teams while aligning with governance frameworks such as NIS2, DORA and ISO/IEC 27001.

You will collaborate with developers, architects and stakeholders, drive secure design reviews, and help grow security capabilities within a multidisciplinary organization

Qualifications

• Minimum 4 years in Application Security.
• Extensive professional experience in Cyber Security.
• Experience leading customer engagements and workshops.
• Experience producing executive-level reports and recommendations.

Responsibilities

• Lead Application Security Assessments and Secure Architecture Reviews.
• Facilitate Threat Modelling and Architectural Risk Assessments (ARA).
• Support the implementation and continuous improvement of SSDLC and DevSecOps practices.
• Define and review secure coding standards and security requirements.
• Assess applications against OWASP ASVS and other recognised standards.
• Advise development teams, architects and business stakeholders on secure design.
• Contribute to application security governance, policies and roadmaps.

Skills

Analytical thinking

Strategic thinking

Learning agility

Collaboration

Coaching

Workshop facilitation

Education

CISSP

CSSLP

CRISC

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

Cloud security cert (Azure/AWS)

Tools

Azure

AWS

CI/CD tooling

Job description

Orange Cyberdefense Group is seeking a Senior Application Security Consultant to guide security across the SSDLC for complex applications. You will translate technical risks into business-focused recommendations, lead assessments, and mentor teams while aligning with governance frameworks such as NIS2, DORA and ISO/IEC 27001.

You will collaborate with developers, architects and stakeholders, drive secure design reviews, and help grow security capabilities within a multidisciplinary organization