Security Analyst (3 Positions)

Next Ventures; Paris; Sur place; EUR 90 000 - 130 000; Plein temps

Résumé du poste

Next Ventures partners with a global financial services organisation based in Brussels to strengthen its Cyber and Information Security team. The role supports business and IT projects through risk assessments, secure-by-design requirements, architecture reviews and security testing.

The candidate will collaborate with business owners, risk teams, auditors, engineers and developers across an international environment, contributing to security standards and services.

Qualifications

• At least three years of cybersecurity experience; senior candidates 10+ years across multiple domains.
• Strong experience in application security, infrastructure security, risk assessments or security architecture.
• Knowledge of IAM, IDaaS, PKI, federation, secure access management, data protection, endpoint security or network security.
• Understanding of OWASP, code-scanning tools, CI/CD pipelines and security automation.
• Experience with cloud technologies (IaaS, PaaS, SaaS), virtualization, networks, databases or IaC.
• Strong communication skills to explain risks to business stakeholders and technical teams.

Responsabilités

• Perform security risk assessments and translate policies, controls and business needs into clear technical security requirements.
• Advise on secure design, implementation and testing of applications and infrastructure.
• Review architectural designs and validate them against security requirements.
• Define security testing requirements and penetration-testing scopes, support testing teams and review reports.
• Develop security standards, technical principles and documented security services.
• Act as SME across IAM, PKI, cryptography, network/cloud security or application security.

Connaissances

Security risk assessments

Application security

Infrastructure security

Security architecture

IAM / IDaaS

PKI / cryptography

Secure access management

Data protection

OWASP / secure coding

CI/CD security / security testing

Cloud security (IaaS/PaaS/SaaS)

Formation

Degree in Computer Science, Engineering or related discipline

Outils

Code-scanning tools

CI/CD tooling

Security automation tools

Description du poste

We are supporting a global financial services organisation operating critical financial infrastructure that is looking to strengthen its Cyber and Information Security team in Brussels.

The successful candidate will support business and IT projects through security risk assessments, secure-by-design requirements, architecture reviews and security testing. You will work with business owners, project managers, risk teams, auditors, engineers, developers and architects across an international environment.

Key Responsibilities

• Perform security risk assessments and translate policies, controls and business needs into clear technical security requirements.
• Advise on the secure design, implementation and testing of applications and infrastructure.
• Review architectural designs and validate them against security requirements and secure-by-design principles.
• Define security testing requirements and penetration-testing scopes, support testing teams and review final reports.
• Develop security standards, technical principles and documented security services.
• Act as a subject-matter expert across areas such as IAM, PKI, cryptography, network security, cloud security or application security.

Experience Required

• At least three years of cybersecurity experience, with senior candidates expected to have ten or more years across multiple security domains.
• Strong experience in application security, infrastructure security, security risk assessments or security architecture.
• Knowledge of IAM, IDaaS, PKI, federation, secure access management, data protection, endpoint security or network security.
• Understanding of application security, OWASP, code-scanning tools, CI/CD pipelines and security automation.
• Experience with cloud technologies, including IaaS, PaaS and SaaS, alongside virtualisation, networks, databases or infrastructure as code.
• Strong communication skills with the ability to explain security risks and recommendations to both senior business stakeholders and technical teams.

Preferred Qualifications

• Degree in Computer Science, Engineering or a related discipline.
• Certifications such as CISSP, GIAC, SABSA, ISO 27001 Lead Auditor or Lead Implementer.
• Security-related product certifications would be advantageous.
• Experience working within financial services, critical infrastructure or another highly regulated environment.
• Strong documentation, presentation, analytical and organisational skills.
• Fluent English and the ability to work effectively within an international, multicultural environment.