Functie

We are looking for an Application Security Engineer to reinforce the Employer Security Team. As Application Security Engineer, you will closely work with the Product and Engineering teams to help them secure Employer’ products. You will report to the Information Security Officer.

Tasks & Responsibilities Perform security validation of application design. Perform Threat modeling. Participate in leading the security champions program. Coach and help security champions in their daily activities. Perform code review when needed. Help improving the DevSecOps strategy. Analyze, prioritize and coordinate the fix of vulnerabilities revealed by the different scanning tools. Coordinate penetration testing activities related to the Employer’ products. Be the Single Point Of Contact (SPOC) for the Engineering and Product teams for all application security questions. Jouw profiel Requirements + years of experience working in the security field. Software engineering experience. BA or MS in relevant field. Fluency in English. Able to coordinate with and explain security concepts to stakeholders from different backgrounds/departments. Proficiency in at least one high-level language (e.g. Python, Javascript, etc.). Understand of application development processes. Knowledge of application security concepts such as threat modeling, secure coding practices, infrastructure security principles, architecture, and network layers. Experience in vulnerability management. Knowledge of OWASP and MITRE ATT&CK frameworks. Good knowledge and preferably experience in a broad range of security technologies including WAF, SAST, DAST, SCA and penetration testing tools. Up-to-date knowledge of cybersecurity threats, current best practices, threat modeling and risk mitigation techniques. Strong leadership abilities

Behoeften van de onderneming of gebruikers op het vlak van organisatie en informatie- en comsystemen analyseren en bepalen De ICT strategie opsen op basis van door de directie bepaalde uitgangspunten en de behoeften van de gebruikers
Toezicht houden op de uitvoeringsmodaliteiten Risicobeheer van de informatiesystemen bepalen en uitvoeren (beveiliging, vertrouwelijkheid, integriteit, betrouwbaarheid, ...) De strategie en de oriëntatie van de informatie- en comsystemen van een organisatie bepalen (evolutie, organisatie, ...) De kwaliteits- en beveiligingsprocedures van de informatie- en comsystemen bepalen en de toepassing ervan controleren Aanbod Top Reasons to Work with Us Flexibility is part of our DNA and you’ll find at Employer you can work % from home or chose to come to the office any day If you choose to come to the office, you’ll discover a fun atmosphere with kicker, PS, arcade machine, nerf battles, and our newly added dartboard If you feel like a change of scenery, we have recently added the option to work at co-working spaces throughout Belgium. Many activities are organized during the year, such as soccer, team lunches, happy hours, , LAN parties, board games nights! We also have running groups, languages lessons, and much more! You’ll be working within a squad organization offering you ownership on projects, and utilize high quality equipment like powerful laptops with Gb of RAM, an i, and a K screens At Employer, learning, training and personal growth are part of the game you’ll have access to online training materials, certifications sponsored by the company, personal growth plans, and career paths to explore new opportunities. You’ll work with a fast-growing, multi-disciplinary and international team representing over different nationalities, in an English-speaking working environment. You’ll have a challenging and rewarding job in an ambitious and fast-paced technology scale-up that has received many national and international awards including “Scale-Up of the year ”! Last but not least, we offer competitive salary and benefits, company car, bonus potential, employee referral program.