Security Testing Specialist
On site
Brussels, Belgium
Full Time
12-03-2025
Job Specifications
With more than 20 years of proven experience, QUALCO is a leading Fintech solutions provider, offering a wide range of analytics-driven, highly scalable enterprise software solutions in over 35 countries worldwide. Our end-to-end technology solutions cover a wide range of needs for Banking, Financial Services, Utilities, Insurance, Retail organisations, and beyond.
We are looking for a Security Testing Specialist toprepare and execute analysis of the applications from a security point of view, including an analysis of the available documentation, source code, of the architecture, and penetration testing.
Responsibilities:
Analysis of documentation, code, and other information, preparation and execution of penetration testing, and analysis and assessment of the results;
Participation in meetings as required, at the start of, end of, and during the security testing process;
Organizing technical meetings to elicit information and escalating to the responsible team leader and/or the statutory staff responsible if necessary;
Assessing findings and alerting the responsible team leader and/or the statutory staff responsible;
Preparing reports on the results of the technical security analysis and assessment, and communicating them to statutory staff responsible according to the processes and procedures foreseen by the Contracting Authority;
Reporting to the specifically assigned Team Leader and the statutory staff responsible on possible technical challenges, actual and future, for the work of the team, and contributing to proposals to address them;
Providing relevant technical security input, also based on specific experience in the environment of the Contracting Authority, to activities, such as technical evolution and maintenance in operations of platform used for the security checks, DevSecOps;
Ensuring that all activities and duties comply fully with regulatory requirements, including the Group Anti-Bribery and Corruption Policy
Requirements
Bachelor's degree in a related field;
At least 3 years of professional experience in a similar position;
Experience in implementation of security measures and/or security auditing;
Experience as developer and/or in roles with technical security responsibilities;
Experience in activities and environments requiring to work with sensitive information, with different information labels and handling rules;
Experience in analysis and in redaction of documents for, and contacts with, technical and non-technical people;
Good knowledge of security and vulnerability management practices, preferably including relevant framework, best practices and standards (e.g. NIST SP800, ISO 27001, OWASP, hardening guidelines);
Good general ICT knowledge, e.g. networking, operating system, firewalls, web applications servers, programming and code quality tools, virtualization, runtimes (it is not required to have practical experience of all of these elements);
Good knowledge of vulnerability and security analysis tools and platforms (e.g. Nessus, Burp, Kali-Linux);
Good knowledge of development practices and knowledge of secure coding;
Understanding and at least basic knowledge of cloud services, and of the different types and configuration of cloud services and applications potentially involving or not cloud;
Certification according to CEH, or equivalent certification;
Very good knowledge of English (Level C1) or very good knowledge of French (Level C1). Knowledge of both languages, one at C1 level and the other at B2 level in any configuration, is required;
Proven organizational, problem-solving and interpersonal skills;
Writing and communication skills, including the ability to participate in multilingual meetings
Benefits
This role is an on - site opportunity in Brussels, Belgium.
At QUALCO, we value diversity and inclusivity. Your race, gender identity and expression, age ethnicity or disability make no difference in Qualco. We want to attract, develop, promote, and retain the best people based only on their ability and behavior.
Disclaimer: Qualco collects and processes personal data in accordance with the EU General Data Protection Regulation (GDPR). We are bound to use the information provided within your job application for recruitment purposes only and not to share these with any third parties. For more details on the processing of your personal data during the Recruitment procedure, please be informed in the Recruitment Notice, before the submission of your application.
About the Company
With more than 20 years of proven experience, QUALCO is a leading Fintech solutions provider in the Credit Management sector. We offer a wide range of analytics-driven, highly scalable enterprise software solutions in over 35 countries worldwide. More specifically, we offer end-to-end technology solutions for: NPL & Receivables Management - Our NPL & Receivables Management solutions offer a holistic approach to credit risk, NPL, and receivables management Data Analytics - We provide software solutions that aim to automa... Know more
Related Jobs
- Company Name
- NRB
- Job Title
- Stage : Cybersecurity analyst
- Job Description
- Job Description Chaque année, chez NRB, nous cherchons de nouveaux talents pour nos projets. Un stage avec nous est l'occasion idéale pour voir si nous sommes faits l'un pour l'autre. La cybersécurité t'intéresse? Rejoins notre équipe spécialisée en sécurité opérationnelle et participe au développement de solutions automatisées pour la détection et la réponse aux incidents de cybersécurité. Tes missions : Ce stage se déroule au sein d'une équipe IT de sécurité opérationnelle, avec deux missions principales : la gestion des vulnérabilités, en participant à l'identification, l'analyse et le suivi des actions correctives; l'exploration d'une nouvelle fonctionnalité de Splunk (un outil d'analyse de données et de gestion des logs, utilisé pour surveiller la sécurité et détecter les incidents). Le stage permettra de travailler avec des outils de cybersécurité, d'analyser des logs et d'améliorer les processus de détection des incidents. Le candidat idéal possède des connaissances en cybersécurité et une bonne capacité à résoudre des problèmes techniques. Et NRB dans tout ça ? Le groupe NRB est aujourd’hui une entreprise leader du secteur IT en Belgique. Nous proposons des services informatiques qui répondent à l’ensemble des besoins en IT : Security services, Infrastructure & Cloud, Software Development, Consultancy & Managed Staffing. Bien plus qu'un stage! Chaque année, nous intégrons des stagiaires motivés, dont beaucoup rejoignent ensuite nos équipes d'experts pour travailler sur des projets passionnants en développement applicatif, infrastructure, ou consultance. Durant ton stage, tu bénéficieras d’un accompagnement personnalisé : ton maître de stage et l’équipe seront là pour te fournir un feedback constructif à chaque étape de ton parcours. Nous t’offrons également une simulation de défense de ton TFE, afin de te préparer au mieux et maximiser tes chances de réussite. Job requirements TON PROFIL Tu suis des études de Bachelier ou de Master en Cybersécurité/ en IT ? Tu es passionné par les sujets en lien avec la cybersécurité ? Tu es un generateur à idées et tu as l'envie de mettre à profit des compétences uniques ? Envoie-nous ta candidature et découvrons ensemble comment créer LE stage qui te correspond !
- Company Name
- EY
- Job Title
- Cyber Security Awareness Consultant - Financial Services
- Job Description
- EY is the only major professional services firm with a dedicated financial services practice (EY FSO) integrated in the EMEIA region. An international team of over 16.000 professionals is working across borders for our clients in the financial sector: Banking, Insurance, Payment Institutions and Wealth & Asset Management, in all service lines: Consulting, Tax, Transactions and Assurance. As we consider our people as the heart of EY, we hire and develop the most passionate people in their field to build a better working world. This starts with a culture that believes in giving you the training, opportunities and creative freedom to make things better. So that, whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. The Opportunity In response to strong market demand, EY has ambitious plans to expand our already market leading Cybersecurity practice. We continue to build our Cybersecurity practice and are now looking for highly skilled and experienced individuals in the security awareness and training domain. By joining us now, you will be part of our exciting growth strategy where you will get the opportunity to develop it in line with your own interests. As a security awareness consultant, you will be responsible for conceiving, developing and implementing security awareness roadmaps, campaigns or initiatives aimed at reinforcing the human firewall of our clients (financial industry), based on the latest cybersecurity best practices, secure behaviors and threat landscape, and promoting a strong organizational cyber culture. You will play a critical role in enhancing the overall organization’s risk posture by ensuring employees are provided with all the necessary resources and knowledge to protect data, assets and people from information security threats. Our team counts one of the most active security awareness teams in the market with dedicated experience in the field, strong thought leadership credentials and present at national level initiatives. We will support you with career-long training and coaching to develop your skills. As EY is a global leading service provider in this space, you will be working with the best of the best in a collaborative environment. So whenever you join, however long you stay, the exceptional EY experience lasts a lifetime. Key Responsibilities Design, develop and implement security awareness roadmaps tailored to the organization’s unique environment with engaging and informative initiatives, both towards all employees and specific target groups. Create engaging content to ensure that the message is heard and applied in diverse and original forms (e.g. articles, posters, board games, videos, flyers, learning modules, etc.). Conduct security awareness maturity assessments to evaluate the current situation awareness levels and identify areas of vulnerabilities based on an existing maturity framework. Monitor and measure the effectiveness of the security awareness initiatives in place through engagement and behavioral metrics. Organize security events. Convey technical security concepts to technical and non-technical audiences, including executives. Stay current with the latest technological developments, human threats and developments in behavioral science. Skills And Attributes For Success This role requires a combination of strong technical knowledge, communication skills and creativity. Bachelor's or Master’s degree in Computer Science, Cybersecurity, Information Systems, Information Technology, Business Management, or related major. A minimum of 2 years of related work experience in security awareness, cyber culture management or cyber training. Preferred: certifications such as CISSP, COMPTIA+, CISM, CRISC, SSAP, CSAP… A passion for the human factor in security A passion for educating and empowering employees against digital threats Strong understanding of the basics of cyber security, social engineering techniques, human vulnerabilities, phishing attacks. Ability to communicate complex concepts in a simple yet impactful manner and linking cyber security to the corporate strategy. ‘Marketing-minded’: Creativity and imagination, capacity of coming up with new ways of delivering the message in engaging and innovative ways. Gamification (gamifying the learning experience) Ability to constantly stay up to date with the evolving cyber threat landscape and latest developments in the fields of cyber security and learning science. A talent for behavioral change Preferred: familiarity with content-creating and content-editing tools High achiever, team player, quality-oriented, enthusiastic, people person General consulting: appetite for client work, presentation skills, ability to work independently and in teams. What Working At EY Offers You will join a dynamic & young team, that is exclusively focused on innovation. Interact with the newest products & technologies and create a better customer experience. We offer you an attractive remuneration package (competitive salary, net allowances and extensive fringe benefits: company car with fuel card, smart phone, health insurance, pension plan, etc.). We offer extensive personal development training budget. We are proud of our flexible working arrangements. We will support you to build a successful career and deliver excellent client service without sacrificing your personal priorities. While our client-facing profession might require regular travel, and at times working at client sites, we are committed to help you achieve a work-life balance. At EY we are passionate about the inclusion and support of individuals of all groups; we do not discriminate based on race, religion, gender, sexual orientation, or disability status.
- Company Name
- Sansaone
- Job Title
- SAP Security Consultant (SN0578)
- Job Description
- Job Description We are looking for an experienced SAP Security Consultant to provide strategic security advice and technical expertise in securing SAP landscapes. The ideal candidate will be responsible for designing, implementing, and optimizing security solutions while ensuring compliance with industry standards and legal frameworks. Key Responsibilities Advise on SAP security strategy and architecture, ensuring robust protection of SAP environments. Develop comprehensive security concepts tailored to customer requirements, regulatory guidelines, and risk assessments. Conduct threat and vulnerability assessments for SAP environments, including SAP S/4HANA, SAP S/4HANA Cloud, and infrastructure components. Implement technical and organizational security measures to enhance system integrity and resilience. Provide expert consultation on IT security technologies, identifying improvements and challenging existing security solutions and processes. Support clients in the implementation and operational management of SAP security frameworks. Collaborate on the development of cybersecurity strategies, contributing to the continuous growth of the security practice. Required Skills & Qualifications Proven experience in SAP security, SAP Basis/Technology, SAP HANA, or SAP authorizations. Strong understanding of corporate processes, business operations, and logistical workflows. Analytical and structured approach cybersecurity Strong consulting and advisory skills evaluating technical feasibility, operational impact, and cost-benefit analysis Willingness to engage in continuous learning, adapting to the fast-evolving security landscape. SIEM, SOC, attack vectors. Preferred Qualifications SAP security projects security monitoring, incident response, and risk management compliance frameworks, audit controls, and regulatory security Hiring Team Member Avula Srivalli Recruitment Coordinator LinkedIn Mail
- Company Name
- EY
- Job Title
- Senior Manager - Cybersecurity - Industries
- Job Description
- The Exceptional EY Experience. It's Yours To Build. We are a team of 55+ Cybersecurity and Privacy professionals that helps organizations address the challenges on cybersecurity and privacy in a way that is in line with their business strategy. We provide independent and impartial assistance in IT and business in industry and government organizations. Our security professionals possess diverse industry knowledge, along with unique technical expertise and specialized skills to support our clients and to growth their own career. Our Belgian practice is part of an EMEIA and Global cyber competency that holds over 7.000 cyber experts. We are one of the 63 Advanced Security Centers globally. Our team is organized based on five core cyber capabilities that drive our go-to-market, i.e. Cyber Strategy and Resilience: Evaluate and improve our clients’ cybersecurity and resiliency program in context of the business growth and operations strategies. Offensive Security: Penetration testing and Red Teaming, identifying weaknesses in our clients’ IT and Technology environment. Defensive Security: Blue Teaming. Handle security incidents with our clients, co-operating their Cyber Security Incident Response Team (CSIRT), working with Cyber Threat Intelligence and running our 24/7 Incident Response service. Cloud Security: Build security in our clients’ cloud solutions with focus on Security Orchestration, Automation & Response (SOAR). Digital Identify and Trust Services: Advise and certify Public Key Infrastructure (PKI) of Trust Service Providers (TSP) and Certificate Authorities (CA) in the context EU eIDAS regulation. The opportunity: Your Next Adventure Awaits? We have ambitious plans to expand our market leading Cybersecurity practice. We continue to build our Cybersecurity practice and are looking for a strong Senior Manager with experience and expertise in one or more cyber topics such as GRC (including regulations), offensive security, defensive security, crisis management or digital identity. You will join a team of experts providing cybersecurity services to a wide range of clients in industry and government, both nationally and internationally. By joining us now you will be part of our exciting growth strategy where you will get the opportunity to shape your career it in line with your own interests and aspirations. Key Responsibilities Bring our cyber services to key accounts and sectors Contribute to the Belgian cyber practice 3-year growth plan and realize growth targets for specific accounts and sectors Be leading in the market and create visibility for our practice through publications and presentations Act as trusted advisor for our clients and lead projects to mature their cyber function and resilience Have the ability to respond and co-manage cyber incidents or crisis with our clients Take responsibility in managing project quality, risks and financials Skills And Expertise Pragmatic, versatile and growth-minded personality with the ability to integrate in a dynamic organization Proven track record in sales, account management and building trusted business relationships with key decision makers and leadership Bring thorough understanding of one or more cyber topics such as GRC (including regulations), offensive security, defensive security, crisis management or digital identity Experienced manager in delivering project milestones and realizing outcome of cyber programs Experience in motivating teams, managing client or eco-system stakeholders and driving change through process and technology implementations Strong ability to convey messages to divers audience with excellent communication and consulting skills You have an analytical mindset, strive for quality and are able to work in a result-oriented environment. You have full working proficiency in Dutch or French and English. What's In It For You EY Family – you become part of the EY Family providing you with all the necessary skills, training and opportunities; enabling you to grow to your fullest potential. Attractive remuneration package - We offer an attractive remuneration package; including a company car and charging card , iPhone plus subscription, health insurance, pension plan, meal vouchers, and eco vouchers. Thanks to our flex plan it is possible to choose what you value most. Flexible working arrangements - We are proud of our flexible working arrangements. We will actively support you in building a successful career and delivering excellent client service without sacrificing your personal priorities. We offer flexible working hours and working from home multiple days per week is possible. Inspiring work environment - At EY we are dedicated to providing you with an inspiring work environment. A work environment that allows you to further develop your skills and enables you to fulfill your true potential. Learning & personal growth - You will benefit from an onboarding program, receive extensive training and will be coached by a counselor. We offer a clear career path tailored to your unique skills with necessary guidance. Fun - By joining our EY- teams, you can participate in team activities, and companywide events and enjoy a drink during our monthly after-work drink. Sustainability - We have a fleet of hybrid and electric cars. Our flex plan makes it possible for you to choose the most sustainable option for you. You can also opt for a train subscription or lease a bike. Diversity & Inclusion - At EY we are passionate about the inclusion and support of individuals of all groups; we do not discriminate on the basis of race, religion, gender, sexual orientation, or disability status. Location - All of our offices are easily accessible by public transport and/or by car and have parking space. They all have parking spaces and charging stations are provided. Here at EY, you’ll have the chance to build a truly exceptional experience. We’ll empower you with the latest technology, surround you with high-performing teams, and provide the global scale and diverse and inclusive culture you need to discover your full potential. Through our coaching and training programs, you’ll develop the skillsets you need to stay relevant today and in the future – all while building a network of colleagues, mentors, and leaders who will be on the journey with you at EY and beyond