← Assignments

Senior Security Engineer – Container Platform (OpenShift)

Freelance Brussels Senior

Will you become the voice of security in the container operations team of a Flemish government institution? Drawing on your experience with OpenShift, CNAPP and STRIDE, you will secure a large, high-profile container platform and coach developers, backed by the security team and with room for training.

On behalf of a Flemish government institution, we are looking for a senior security engineer to become the voice of security within the container operations team.

We are looking for someone with professional experience in IT security and containerisation, including Red Hat OpenShift, cloud-native application protection platforms (CNAPP) and threat modelling using STRIDE, who enjoys working autonomously but is also a team player.

  • You secure the container platform.
  • You ensure that developers deliver secure applications.
  • You provide coaching and advice on security best practices, with a strong focus on security within the container landscape.
  • You represent security in a multidisciplinary team of various experts, taking a leading role in containerisation.

Your experience in both security and containerisation, combined with your diplomatic assertiveness, allows you to put your security stamp on a large container environment with high visibility both inside and outside the organisation. Naturally, you can rely on the organisation's security team and take the necessary training courses to keep your skills up to date.

What we are looking for

Technical context

  • Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications, ... 5 yr Senior Must have

Domain knowledge

  • Proven experience in analysing, optimising and documenting security processes and governance Must have
  • Proven expertise in a specific knowledge domain of information security Must have

Specific skills

  • Good knowledge of current IT risks and experience in implementing security solutions to mitigate them Must have
  • Proven experience with CNAPP platforms, including reporting, runtime policies, compliance checks... Should have
  • Proven experience with containerisation technology, in particular Kubernetes Should have
  • Proven experience in implementing security best practices in containers Should have
  • Proven experience with DevSecOps & CI/CD, integrating security into the software development pipeline, such as SAST/DAST tools, GitLab CI Should have
  • Proven experience in detecting and managing vulnerabilities using Vulnerability Management solutions, in particular in container images Should have
  • Proven experience with Red Hat OpenShift (in particular version 4) Should have
  • Proven experience with threat modelling according to STRIDE. Should have
  • Proven experience with security management techniques and/or frameworks (e.g. ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense) Should have
  • Proven knowledge and experience demonstrated through certifications depending on the domain of expertise (e.g. CISM, CISSP, CEH). Should have
  • Proven scripting experience. Should have
  • Familiar with cloud technologies (AWS, Azure, GCP) and with the security concerns and the advantages and disadvantages of a move to the cloud. Certifications are an asset. Should have

General skills

  • You can work both independently and as part of a team to achieve the common goal Must have
  • You take initiative and are willing to take on responsibility. Must have
  • Ability to communicate with a broad cross-section of staff to explain and enforce security measures Must have
  • Collaborating with and building a network of internal and external partners Must have
  • Language requirement: Dutch at European CEFR level C2. Must have