Senior Application Security Consultant & GRC Advisor

Orange Cyberdefense; Antwerpen; Sur place; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

32 vacation days

Meal vouchers

Eco-cheques

Hospitalization & group insurance

Company laptop

Mobile phone with unlimited use

Training & certifications

Résumé du poste

Orange Cyberdefense in Belgium seeks a Senior Application Security Consultant to drive security across the SSDLC, align with NIS2, DORA, and ISO/IEC 27001, and translate complex risks into actionable business recommendations. You will lead security assessments, architect reviews, and collaborate with diverse teams to strengthen client environments.

The role emphasizes advisory capabilities, executive reporting, and aiding customers in adopting DevSecOps with governance-driven security strategies.

Qualifications

• Minimum 4 years in Application Security.
• Experience leading customer engagements and workshops.
• Experience producing executive-level reports and recommendations.

Responsabilités

• Lead Application Security Assessments and Secure Architecture Reviews.
• Facilitate Threat Modelling and Architectural Risk Assessments (ARA).
• Support the implementation and continuous improvement of SSDLC and DevSecOps practices.
• Define and review secure coding standards and security requirements.
• Assess applications against OWASP ASVS and other recognised standards.
• Advise development teams, architects and business stakeholders on secure design.
• Contribute to application security governance, policies and roadmaps.

Connaissances

Application Security

Threat Modelling

SSDLC

DevSecOps

Governance & Compliance

Security Architecture

Cloud Security

Risk Assessments

Outils

OWASP ASVS

NIS2

ISO/IEC 27001

Description du poste

Orange Cyberdefense in Belgium seeks a Senior Application Security Consultant to drive security across the SSDLC, align with NIS2, DORA, and ISO/IEC 27001, and translate complex risks into actionable business recommendations. You will lead security assessments, architect reviews, and collaborate with diverse teams to strengthen client environments.

The role emphasizes advisory capabilities, executive reporting, and aiding customers in adopting DevSecOps with governance-driven security strategies.