Senior Security Engineer

BIG WATER CONSULTING (BWC); Brussel Hoofdstad; Hybride; EUR 90 000 - 135 000; Plein temps

Résumé du poste

BIG WATER CONSULTING (BWC) seeks a Senior Operational Security Engineer for its client in Brussels, Belgium. This full-time permanent role is hybrid: 50% onsite, 50% teleworking in Belgium. Freelance can also apply.

Expect at least 5 years in IT security, strong PKI/HSM expertise (Adyton, nCipher), HashiCorp Vault, cryptographic standards, and collaboration with IT architects and security teams. Fluent French and English required; Dutch is a plus.

Qualifications

• Fluent spoken French and fluent spoken/written English are required.
• Dutch language skills are a plus.
• Minimum 5 years of IT Security / Operational Security experience.
• Strong knowledge of HSM infrastructure, PKI and cryptographic keys.

Connaissances

French (fluent)

English (fluent)

Dutch (plus)

Outils

Adyton

nCipher HSMs

HashiCorp Vault

PKI

Description du poste

BWC is looking for an Operational Security Engineer - Senior for its client in Brussels, Belgium. It's a full-time permanent contract with BWC. Freelance can also apply.

Job Type: Hybrid :- 50% Onsite + 50% Teleworking in Belgium.

• Language: Fluent spoken French and fluent spoken/written English are required. Dutch is a plus.
• Experience: Minimum 5 years of relevant experience in IT Security / Operational Security.
• Strong knowledge of HSM infrastructure, PKI, cryptographic keys, digital certificates, and application secrets.
• Strong hands‑on experience with Adyton and/or nCipher HSMs, including monitoring, maintenance, support, and lifecycle management.
• Experience with HashiCorp Vault for application secrets management, access control, rotation, and secure storage.
• Strong knowledge of Cryptographic standards and best practices, particularly NIST, PCI‑DSS, and PSD2.
• Experience with Cryptographic key and certificate lifecycle management, including rotation, revocation, access control, and key ceremonies.
• Experience in High‑availability security infrastructures and troubleshooting security incidents related to authentication, encryption, and secret management.
• Experience with HSM lifecycle management and HSM configuration/support.
• Knowledge of Post‑Quantum Cryptography and migration toward quantum‑resistant solutions.
• Knowledge of Extended Key Usage (EKU) readiness and compliance.
• Experience with Crypto agility and improving certificate/key lifecycle management processes.
• Experience with Security platform integration and collaboration with enterprise/group security tools such as Certis and Horizon.
• Ability to act as Crypto Design Authority, advising on cryptographic standards, algorithms, and security best practices.
• Experience with Working with IT architects, application owners, COE Security, Group Security, and other stakeholders to translate business and regulatory requirements into technical security solutions.
• Python and/or Bash is a plus.
• ServiceNow, Rally, Portunus, Adyton, nCipher, and HashiCorp Vault are a plus.
• Good knowledge of Word, Excel, and PowerPoint.
• Experience working with Agile methodologies is a plus.
• Understanding of security and compliance requirements such as PSD2 and PCI‑DSS.
• Strong collaboration, communication, analytical, proactive, and problem‑solving skills.