Strategic Application Security Lead — SSDLC & Compliance

Orange Cyberdefense; Brussel Hoofdstad; Hybride; EUR 90 000 - 130 000; Plein temps

Avantages offerts par ce poste

32 vacation days

Meal vouchers

Eco-cheques

Hospitalization insurance

Group insurance

Company laptop

Mobile phone

Résumé du poste

Orange Cyberdefense is seeking a Senior Application Security Consultant to integrate security across the SSDLC and align with governance frameworks such as NIS2, DORA and ISO/IEC 27001. You will translate technical risks into business recommendations while advising developers, architects and executives.

You will drive secure design, manage customer engagements and contribute to security governance across multi-year roadmaps, strengthening clients’ security postures in Belgium and beyond.

Qualifications

• Extensive professional experience in Cyber Security.
• Minimum 4 years in Application Security.
• Experience leading customer engagements and workshops.
• Experience producing executive-level reports and recommendations.

Responsabilités

• Lead Application Security Assessments and Secure Architecture Reviews.
• Facilitate Threat Modelling and Architectural Risk Assessments (ARA).
• Support the implementation and continuous improvement of SSDLC and DevSecOps practices.
• Define and review secure coding standards and security requirements.
• Assess applications against OWASP ASVS and other recognised standards.
• Advise development teams, architects and business stakeholders on secure design.
• Contribute to application security governance, policies and roadmaps.

Connaissances

OWASP ASVS

Top 10/SA MMA

Risk Assessments

SSDLC

Application Security Architecture

API Security

DevSecOps

Cloud Security

IAM

NIS2

DORA

ISO 27001

ISO 27005

NIST CSF

SSDF (NIST SP800-218)

CIS Controls

Formation

CISSP

CSSLP

CRISC

ISO/IEC 27001 Lead Implementer

ISO/IEC 27001 Lead Auditor

Outils

Azure

AWS

Description du poste

Orange Cyberdefense is seeking a Senior Application Security Consultant to integrate security across the SSDLC and align with governance frameworks such as NIS2, DORA and ISO/IEC 27001. You will translate technical risks into business recommendations while advising developers, architects and executives.

You will drive secure design, manage customer engagements and contribute to security governance across multi-year roadmaps, strengthening clients’ security postures in Belgium and beyond.