Subject Matter Expert Security Senior

This is a consultancy mission at a client site, where you will represent Keystone Solutions as a Subject Matter Expert Security - Senior. As a Keystone Solutions consultant, you will be engaged in dynamic projects, working on-site and remotely, and bringing your expertise to diverse client environments. You will join the Application Security & Vulnerability Management team, carrying out all responsibilities under the Keystone Solutions consultancy model.

• →Manage requests from squads for setting up application security toolings managed by the team.
• →Conduct code reviews on applications developed within IT using security toolings (SAST).
• →Review usage of third-party libraries using security tooling (SCA).
• →Proactively support and assist all IT development squads in secure development and SecDevOps adoption, including preparing training sessions on security topics and coaching squads on tool usage.
• →Manage the technical infrastructure supporting automatic code reviews and open source library evaluations, maintain applied policies (security, compliance), follow up and report on evaluations, keep development guidelines up-to-date, and review defects and vulnerabilities.
• →Create and maintain reporting on vulnerabilities.
• →Take a leadership role as an application security expert in the implementation of projects and changes within the team’s scope.
• →Support IT developers in finding solutions to security risks and incidents.
• →Provide input for new security measures, such as detection mechanisms.
• →Occasionally write scripts for internal tooling, leveraging your coding background to support secure code development.

• Master’s degree in IT or Engineering, or equivalent experience.
• Experience in application development and up-to-date knowledge of current application development trends.
• Strong interest in application security with the ambition to become an expert in the next 3-5 years.
• Very good understanding of the software development lifecycle in Agile and DevOps environments, including security checks at different stages.
• Up-to-date on recent developments in software development, including programming languages, technologies, and standard tools/platforms (Jenkins, Gitlab, Maven, Docker, etc.).
• Interest and initial experience in penetration testing.
• Knowledge of network security and understanding of mobile application development and testing challenges.
• Experience in environments where information security is critical (banking, pharma, aviation, nuclear, military, etc.) is a plus, but not required.
• Team player, self-starter, able to interact with various profiles (developers, architects, testers, business, management).
• Willingness to stay up-to-date with the latest trends, quick learner, proactive attitude, good communication and influencing skills, analytical and synthesis skills, autonomy, commitment, perseverance, flexibility, accuracy, and control-minded.
• Ability to work in a dynamic, multicultural environment and provide solutions as part of a team.
• Assertive and result-oriented.

• Very good knowledge of English (absolute must).
• Desirable to have knowledge of Dutch or French (not a must).

• 50% on-site and 50% homeworking, depending on project needs.