Expert in Secure Development (SNS01622)
Job Description
Welcome to Sansaone, a dynamic force in the realm of ICT talent acquisition. Born out of a passion for excellence and a vision for connecting outstanding professionals with forward-thinking organizations, we stand as a beacon for strategic recruitment solutions in the Information and Communication Technology sector. With a commitment to excellence and a passion for connecting exceptional professionals with innovative organizations, we are your strategic partner in building transformative teams.
We currently have a vacancy for an Expert in Secure Development fluent in English, to offer his/her services as an expert who will be based in Belgium. The work will be carried out either in the company’s premises or on-site at customer premises.
- In the context of the first assignment, the successful candidate will be integrated with the Development team of the company that will closely cooperate with a major client’s IT team on site.
Your tasks
- Define security requirements and derive technical actions targeting the application components and the code base.
- Draft documentation such as architecture design descriptions, assessment reports and configuration descriptions.
- Take an active part in developing and improving the application security, and have it understood and implemented by the team.
- Analyse risks and security policy requirements and propose actions.
- Provide security training and education.
- Draft security programs, security plans and propose implementation actions.
- Develop and enforce IT security processes.
- Manage Compliance attestations and reporting.
Requirements
- Master’s degree in IT or relevant discipline, combined with 17 years of relevant working experience in IT.
- At least 6 years of experience in the security domain.
- At least 4 years of experience with ISO 27000 family of standards or equivalent security standards implementation.
- At least 4 years of experience with the security aspect of software development (i.e.: authentication with open id connect SAML or CAS, secure rest or web services, encryption with PKI, authorisation, secrets management).
- At least 4 years of experience with secure IT development patterns.
- At least 4 years of experience in drafting risk assessments and IT Security plans.
- At least 4 years of experience in ITIL (v3 or v4).
- Experience in coaching and training.
- Knowledge of OWASP.
- Knowledge of Agile methodology.
- Knowledge of ITSRM2 will be an advantage.
- At least one of the following certifications is required: Certified Information Systems Security Professional (CISSP), Certified Information Security Manager (CISM), Certified Information System Auditor (CISA), or any equivalent to these.
- Excellent command of the English language.
Hiring Team Member
