Senior Application Security Risk Analyst (SALM)

HumanInTech; Namen; Hybride; EUR 55 000 - 75 000; Plein temps

Résumé du poste

HumanInTech in Namur, Belgium, seeks a seasoned SALM risk specialist to manage risk analyses, threat modelling and security requirements across the application lifecycle. You will coordinate with project teams, architects and suppliers, ensuring proportionate controls and proper documentation.

The role supports a 12-month assignment starting January 2027 with hybrid on-site work (Namur). Employment options include freelance or permanent with potential for subsequent assignments.

Qualifications

• Experience in application risk analysis and threat modelling.
• Experience in project support: requirements definition, reviews, derogations and risk management.
• Ability to communicate security requirements clearly to project managers, architects, developers and stakeholders.
• Knowledge of threat modelling methods and frameworks: OWASP, STRIDE, ISO 27005, NIST SSDF, NIS2 and CyFun.
• Experience with documentation, decision traceability and tracking tools (GRC).
• Strong analytical skills with the ability to prioritise risks.
• Autonomous management of multiple cases in parallel.
• Collaborative mindset when working with diverse technical and business teams.
• Proficiency in French (C2).

Responsabilités

• Collect information and qualify application criticality, determining SALM pathway and controls.
• Perform or support risk analyses and threat modelling per organisation's methodology.
• Participate in architecture and data-flow reviews to define security requirements.
• Advise project managers, architects, developers and stakeholders throughout the project lifecycle.
• Track recommendations, evidence and decisions; maintain a register of residual risks.
• Prepare SALM opinion before production release and escalate significant risks.
• Contribute to SALM standards, checklists, templates and lessons learned.
• Collaborate with SOC, DevSecOps, SecOps and external suppliers to automate controls.

Connaissances

Application risk analysis

Threat modelling

Security requirements definition

Stakeholder communication

GRC tools

Analytical thinking

Autonomy in multiple cases

Collaboration

French (C2)

Formation

Bachelor's degree or higher

Outils

OWASP

STRIDE

ISO 27005

NIST SSDF

NIS2

CyFun

GRC tools

Description du poste

HumanInTech in Namur, Belgium, seeks a seasoned SALM risk specialist to manage risk analyses, threat modelling and security requirements across the application lifecycle. You will coordinate with project teams, architects and suppliers, ensuring proportionate controls and proper documentation.

The role supports a 12-month assignment starting January 2027 with hybrid on-site work (Namur). Employment options include freelance or permanent with potential for subsequent assignments.