Junior Functional Security Analyst

We are looking for a motivated Junior Functional Security Analyst with a strong interest in new technologies and application security. This position is a consultancy mission at a client site representing Keystone Solutions. You will join a dynamic team responsible for addressing application security challenges in solutions developed for our clients. Working closely with functional analysts, developers, architects, and cybersecurity specialists, you will develop your expertise in secure software development.

• →Supporting the preparation of functional and technical specifications related to application security.
• →Contributing to the definition and implementation of the Secure Development Lifecycle (SDL), based on industry standards and NIST best practices.
• →Working with development teams to integrate appropriate security controls throughout the application lifecycle.
• →Helping verify compliance with applicable security standards, internal policies, and regulations.
• →Keeping up to date with emerging vulnerabilities, threats, and application security practices.
• →Contributing to security awareness initiatives for internal teams.
• →Assisting with the preparation, coordination, and follow-up of application security testing.
• →Monitoring software vulnerabilities and helping identify potential risks to applications.
• →Reviewing vulnerability reports from internal and external sources, such as vulnerability databases and security assessment tools.
• →Documenting findings and helping communicate security risks clearly to both technical and non-technical stakeholders.

You hold a degree in computer science, cybersecurity, information systems, or a related field, or have gained equivalent knowledge through relevant training or practical experience. You may be a recent graduate or have initial professional experience in functional analysis, software development, IT, or cybersecurity. You are curious, analytical, eager to learn, and interested in building your career in application security.

We are looking for someone who:

• Has a basic understanding of software development processes, such as Agile or DevOps.
• Has introductory knowledge of application security principles and standards, such as OWASP, NIST, or ASVS.
• Is able to understand technical topics and translate them into clear requirements or documentation.
• Enjoys working with multidisciplinary teams, including developers, architects, analysts, and security specialists.
• Has good written and verbal communication skills.
• Is organized, detail-oriented, and comfortable asking questions.
• Is willing to learn about vulnerability management, secure software development, and threat modeling.
• Has a basic understanding of concepts such as authentication, access control, encryption, and software vulnerabilities.
• Has some familiarity with application lifecycle and development tools, such as Jira, Git, or Jenkins.

Knowledge of the following topics is considered an advantage, but is not required:

• Software Bills of Materials (SBOM) and tools such as CycloneDX or SPDX.
• Vulnerability management tools such as Dependency-Track.
• Vulnerability scoring and prioritization methods such as CVSS and EPSS.
• Security frameworks such as ISO 27001.
• Threat modeling and secure software architecture principles.
• Application security testing approaches and tools, including SAST and DAST.

Above all, you are enthusiastic about application security and motivated to grow in a supportive, fast-evolving environment where security plays a critical role. This role will be carried out under Keystone Solutions' consultancy model, providing you with dynamic projects, turbo-charged learning opportunities, and a commitment to your career growth. Being a

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.

• Functional analysis - Level: Junior - Most recent: Any time
• NIS2 / NIST / ISO27001 - Level: Junior - Most recent: Any time
• SAST, DAST & SCA tooling (bij voorkeur met Veracode) - Level: Junior - Most recent: Any time
• Secure development lifecycle procedures - Level: Junior - Most recent: Any time
• Security (OWASP/OAUTH/OpenId/...) - Level: Junior - Most recent: Any time
• security management framework (ISO27001, C2M2, ...) - Level: Junior - Most recent: Any time

Dutch
Level Active knowledge
English
Level Active knowledge
French
Level Active knowledge