Senior Application Security & Risk Advisor

Orange Cyberdefense; Wijnegem; Hybride; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

32 vacation days

Meal vouchers

Eco-cheques

Hospitalisation & group insurance

Company laptop

Résumé du poste

Orange Cyberdefense in Belgium seeks a Senior Business Consultant - Cybersecurity to help organisations integrate security across the Secure Software Development Lifecycle, aligning with governance and compliance frameworks such as NIS2, DORA, ISO/IEC 27001 and OWASP ASVS.

You will lead Application Security assessments, threat modelling, and SSDLC improvements, advising developers, architects and business stakeholders on secure design and governance.

Qualifications

• Extensive professional experience in Cyber Security.
• Minimum 4 years in Application Security.
• Experience leading customer engagements and workshops.
• Experience producing executive-level reports and recommendations.

Responsabilités

• Lead Application Security Assessments and Secure Architecture Reviews.
• Facilitate Threat Modelling and Architectural Risk Assessments (ARA).
• Support the implementation and continuous improvement of SSDLC and DevSecOps practices.
• Define and review secure coding standards and security requirements.
• Assess applications against OWASP ASVS and other recognised standards.
• Advise development teams, architects and business stakeholders on secure design.
• Contribute to application security governance, policies and roadmaps.

Connaissances

Analytical thinking

Strategic thinking

Executive communication

Workshop facilitation

Stakeholder management

Formation

CISSP

CSSLP

CRISC

ISO/IEC 27001 Lead Implementer

Cloud security certification (Azure/AWS)

Outils

OWASP ASVS

OWASP Top 10

OWASP SAMM

Threat Modelling (STRIDE)

FAIR risk assessment

SSDLC

Application Security Architecture

API Security

DevSecOps & CI/CD Security

Cloud Security (Azure/AWS)

Identity & Access Management

Description du poste

Orange Cyberdefense in Belgium seeks a Senior Business Consultant - Cybersecurity to help organisations integrate security across the Secure Software Development Lifecycle, aligning with governance and compliance frameworks such as NIS2, DORA, ISO/IEC 27001 and OWASP ASVS.

You will lead Application Security assessments, threat modelling, and SSDLC improvements, advising developers, architects and business stakeholders on secure design and governance.