{"id":3670358,"url":"https://alion.io/job/cipal-schaubroeck-application-security-analyst","title":"Application Security Analyst","company":{"id":694663,"name":"Cipal Schaubroeck","domain":"cipalschaubroeck.be","url":"https://alion.io/company/cipalschaubroeck","size_band":"501-1000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Teamtailor","truth_index":{"grade":"A","score":89,"open_postings":10,"ghost_share":0.1,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":92,"computed_at":"2026-11-06T05:58:05Z"}},"role":"Security","role_family":"Security","seniority":null,"employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Westerlo, Belgium"],"countries":["BE"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":null,"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"CI/CD","optional":false},{"name":"CVSS","optional":false},{"name":"EPSS","optional":false},{"name":"GDPR","optional":false},{"name":"GitLab","optional":false},{"name":"Java","optional":false},{"name":"Jenkins","optional":false},{"name":"OWASP","optional":false},{"name":"OWASP ASVS","optional":false},{"name":"OWASP Dependency-Track","optional":false},{"name":"OWASP SAMM","optional":false},{"name":"OWASP Top 10","optional":false},{"name":"SonarQube","optional":false},{"name":"STRIDE","optional":false}],"status":"live","first_seen_at":"2026-11-03T08:03:47Z","employer_posted_date":"2026-11-03","last_verified_at":"2026-11-06T06:35:58Z","board_verified":true,"closed_at":null,"days_open":2,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":2},"description":"Waar kom je terecht?\nCipal Schaubroeck ontwikkelt software voor lokale besturen. Burgers en organisaties rekenen dagelijks op die toepassingen, dus veiligheid is geen detail.\nHet securityteam is klein en internationaal, waardoor Engels ook een belangrijke werktaal is. Verder werk je nauw samen met de business units, de security champions en de CISO.\nWat ga je doen?\nSecure development: coding- en securityguidelines opstellen, security champions ondersteunen vanuit de tooling en de SSDLC mee vormgeven, met focus op security in CI/CD (Jenkins, GitLab).\n\nSecurity testing: SCA (Dependency Track), SAST (SonarQube), DAST (ZAP) en AI-gebaseerde scanning integreren, aangevuld met security-gerichte code reviews en threat modelling.\n\nSecurityframework: de richtlijnen uit het control- en securityframework tot bij de teams brengen, assessments uitvoeren en de teams ondersteunen bij CRA-conformiteit.\n\nKwetsbaarheden en incidenten: kwetsbaarheden prioriteren via risicoanalyse, CVSS en EPSS. Bij een hack of kwetsbaarheid de impact bepalen, de juiste mensen samenbrengen en de opvolging en RCA in handen nemen.\n\nAdvies: onderbouwd advies geven aan de CISO en proactief aankloppen bij teams, dwars door de organisatie heen.\n\nWie ben jij?\nEen ervaren profiel met een stevige development-achtergrond en een grote interesse in application security.\nAchtergrond: bachelordenkniveau, minstens 5 jaar ervaring in development of applicaties, goede Java-kennis, inzicht in hoe systemen samenhangen en affiniteit met de rol van security champion.\n\nKennis: SSDLC en OWASP SAMM, OWASP Top 10 en ASVS, vulnerability management en incident response (CVSS, EPSS), Dependency Track, SonarQube en ZAP in CI/CD, container security en hardening, secure design patterns en basiskennis van GDPR en CRA (geen juridische kennis nodig).\n\nPersoonlijkheid: leiderschap en ownership bij incidenten, proactief, kritisch en standvastig, ook tegenover een CISO.\n\nTaal: Nederlands & Engels.\n\nPluspunten\nErvaring met threat modelling volgens STRIDE, kennis van AI-security (AI-systemen beschermen) en certificaten in (application) security of AI.\nWaarom werken bij Cipal Schaubroeck?\nBen jij op zoek naar een fijne werkomgeving waar teamspirit en innovatie centraal staan? Dan is Cipal Schaubroeck de ideale plek voor jou!\nAantrekkelijk verloningspakket: Inclusief een elektrische wagen, uitgebreid verzekeringspakket, maaltijdcheques, thuiswerkvergoeding en meer.\n\nWork-Life Balance: Wij bieden standaard hybride werken, zodat je een gezonde balans kunt bewaren tussen werk en privé.\n\nOpleidingsmogelijkheden: Blijf je ontwikkelen met onze TSS Academies en tal van andere leermogelijkheden.\n\nPersoonlijke groei: Wij geloven dat iedereen de architect is van zijn eigen loopbaan en ondersteunen jouw professionele ambities.\n\nRuimte voor innovatie: Je krijgt de kans om mee na te denken over nieuwe technologieën, waaronder AI, en hoe we die op een zinvolle manier kunnen inzetten binnen onze dienstverlening.\n\nWil jij mee bepalen hoe veilig de software is waar onze lokale besturen en burgers dagelijks op rekenen? Solliciteer dan nu.","description_format":"text","description_chars":3100,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Application Security","IT Consulting & Digital Transformation"],"lifecycle":[{"event":"open","at":"2026-11-03T09:05:10Z"}],"visa":[],"liveness":{"score":86,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.86,"p_room":1,"age_days":2,"expected_fill_days":92,"reasons":["conf:4","win:early"],"computed_at":"2026-11-06T05:58:05Z"},"pay":null,"html_url":"https://alion.io/job/cipal-schaubroeck-application-security-analyst","json_url":"https://alion.io/job/cipal-schaubroeck-application-security-analyst.json","meta":{"generated_at":"2026-11-06T07:12:34Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12741,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-07T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":694663},"rest":"https://alion.io/mcp/rest/get_company?id=694663"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fcipal-schaubroeck-application-security-analyst"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fcipal-schaubroeck-application-security-analyst"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fcipal-schaubroeck-application-security-analyst"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/cipal-schaubroeck-application-security-analyst\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fcipal-schaubroeck-application-security-analyst"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3670358}},{"tool":"search_jobs","arguments":{"company":"cipalschaubroeck.be","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3670358},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}