Junior Functional Security Analyst

Nexeo is currently looking for a Junior Functional Security Analyst to join the cybersecurity team of one of our clients in Belgium.

While professional experience and qualifications are key for this role, make sure to check you have the preferable soft skills before applying if required.

You will support the team in addressing application security challenges and contribute to integrating security requirements throughout the software development lifecycle. Working closely with functional analysts, developers, architects and cybersecurity specialists, you will develop your expertise in secure software development and application security.

Your Responsibilities

Functional & Security Analysis

• Support the preparation of functional and technical specifications related to application security.
• Translate business and technical needs into clear functional and security requirements.
• Contribute to the integration of security controls throughout the application lifecycle.
• Support functional analysts, developers and architects in addressing application security requirements.

Secure Development Lifecycle

• Contribute to the definition and implementation of the Secure Development Lifecycle (SDL).
• Apply security best practices based on OWASP, NIST and ASVS principles.
• Support teams in integrating security practices into Agile and DevOps development processes.
• Help assess compliance with security standards, internal policies and applicable regulations.

Vulnerability Management & Security Testing

• Assist with the preparation, coordination and follow-up of application security testing.
• Monitor software vulnerabilities and identify potential security risks.
• Review vulnerability reports from internal and external sources.
• Contribute to vulnerability analysis, prioritization and remediation follow-up.
• Document security findings and communicate risks to both technical and non-technical stakeholders.

Security Awareness & Continuous Improvement

• Contribute to security awareness initiatives for internal teams.
• Stay up to date with emerging vulnerabilities, threats and application security practices.
• Support continuous improvement of application security processes and procedures.
• Contribute to the development of secure software practices across the organization.

Your Profile

• Junior profile with initial experience or strong interest in Functional Analysis, IT, Software Development or Cybersecurity.
• Bachelor’s or Master’s degree in Computer Science, Cybersecurity, Information Systems or a related field, or equivalent practical experience.
• Basic understanding of software development processes, particularly Agile or DevOps.
• Initial knowledge of Application Security principles and standards.
• Ability to understand technical topics and translate them into clear requirements and documentation.
• Strong interest in secure software development, vulnerability management and threat modeling.
• Comfortable working with developers, architects, functional analysts and cybersecurity specialists.
• Organized, analytical, detail-oriented and eager to learn.

Technical Skills

Mandatory:

• Functional Analysis
• Application Security fundamentals
• OWASP / NIST / ASVS
• Secure Development Lifecycle (SDL)
• Basic knowledge of authentication, access control, encryption and software vulnerabilities
• Understanding of security and development processes
• Agile / DevOps fundamentals

Nice to have:

• NIS2 / NIST / ISO 27001
• SAST, DAST & SCA security testing tools, ideally Veracode
• OAuth / OpenID Connect
• Security Management Frameworks such as ISO 27001 / C2M2
• SBOM, CycloneDX or SPDX
• Vulnerability management tools such as Dependency-Track
• Vulnerability scoring methods such as CVSS / EPSS
• Threat modeling and secure software architecture
• Application security testing methodologies
• Familiarity with Jira, Git and Jenkins

Languages

• Dutch: Active knowledge
• French: Active knowledge
• English: Active knowledge
• Ability to communicate effectively with both technical and non-technical stakeholders.

Soft Skills

• Curious and eager to learn
• Strong analytical mindset
• Structured and detail-oriented
• Good communication skills
• Proactive and solution-oriented
• Comfortable working in multidisciplinary teams
• Able to ask questions and challenge existing practices
• Strong interest in Cybersecurity and Application Security
• Motivated to grow in a fast-evolving security environment

Interested in starting or developing your career in Application Security? xlxgzvr Send me your updated CV and let's discuss the opportunity!