🎁 Before you apply, rehearse this interview. Create your free WorkMundi account and get an Interview Training on HelpsYouSpeak — no cost, no card. I want my training →
Function We are looking for an experienced Security Engineer – SecOps & Application Security to strengthen our Group Engineering team in Brussels. This is a senior security engineering role that merges Security Operations depth, Application Security engineering expertise and Security Architecture and Governance experience. You will be a trusted security partner to our application engineering, platform, and OT/IT operations teams, embedding security throughout the entire Software Development Lifecycle. As Elia Group embeds AI into engineering products and faces increasingly AI-powered adversaries, you will also help secure both the AI systems we build and detect the AI-accelerated attacks we face. As Security Engineer, you will: Champion a Secure-by-Design culture and run threat modelling for applications, platforms, AI/LLM-infused services, and major changes. Integrate security checks such as SAST, DAST, SCA, container scanning and IaC security checks into CI/CD pipelines whenever needed. Own the vulnerability management lifecycle for application-layer findings, including severity classification, remediation SLAs and tracking through to closure. Triage and contextualise findings from automated tools to eliminate noise and prioritise exploitable risk. Provide hands-on secure code review and security validation of AI-generated code where requested. Maintain and evolve security guidelines covering OWASP Top 10, OWASP LLM Top 10 and CWE mitigations, tailored to Elia Engineering and IT Security standards. Drive risk-based prioritisation for security-related issues picked up during SDLC activities and security monitoring activities. Act as an interface/internal consultant between the IT security teams and the Engineering teams. Advise on security architecture, including API gateway hardening, secrets management, OAuth 2.0/OIDC implementations and zero-trust network segmentation. Be a point of contact for the SOC and IT Security teams, providing application/engineering security support where needed. Support security incidents involving application-layer attacks and translate findings into hardening tasks for engineering teams. Support security initiatives in the organisation, including input into pentesting scope and validating findings with engineering teams. Your Profile Master’s degree in Computer Science, Computer Engineering, Cybersecurity or relevant equivalent experience. Minimum of 5 years of combined experience in application security and/or security operations roles, preferably with at least 2 years in a KRITIS, financial services, or similarly regulated environment. Deep familiarity with OWASP ASVS, WSTG, SAMM and OWASP LLM Top 10 frameworks. Proficiency in at least two scripting/programming languages such as Python, Bash, Java, .NET, Go or similar. Practical experience integrating security tooling into CI/CD pipelines and working within Agile/SAFe delivery models. Knowledge of application security, secure SDLC, SAST/DAST tooling, threat modelling, code review, API security and AI/LLM application security. Experience working with both software engineering teams and governance/compliance functions. Experience using risk frameworks as a means to drive action. Strong communication skills, including executive risk reporting, developer coaching and stakeholder management. You are fluent in English. Knowledge of Dutch, French and/or German is a plus. Nice to have: Certifications such as OSEP, GPEN, AWS/Azure Security Specialty, GXPN, CISM or CISSP. Experience with SIEM platforms, writing detection logic and familiarity with MITRE ATLAS for AI/ML threat modelling. Familiarity with OT/ICS security or energy sector technology stacks. Working proficiency in German or French; English is the working language of IT functions. Offer Salary : a competitive salary package, allowance for representation expenses, year-end bonus, double vacation pay, meal vouchers (€10 per working day), eco-vouchers, sport & culture vouchers, bonuses based on individual and group results. Insurance : group insurance, hospitalisation insurance, ambulant care insurance for the whole family and also personal accident insurance. Vacation : You will be entitled to 20 vacation days and 5 additional vacation days, 6 local days, 4 exempt days (after 1 year of employment) and up to 5 long-service days (1 day for every 3 years in employment). Social fund : Year-end vouchers, birth and marriage allowance. We will also cover part of the cost of glasses, a dental prosthesis or similar needs. Communication : you will be given an iPhone, a phone subscription (for work and private use) and a laptop with internet reimbursement. Discounts : you will enjoy a 30% discount on your gas and electricity bill. Mobility : we will offer you a company car and public transport or a mobility budget. Elia shares : Elia will give you the opportunity to subscribe to shares with a discount of 16.66% on the average share price. Location Main working location will be in Brussels, Empereur. (Close to the central station) + Homeworking
Here's how to pick the right one and stand out in your application.
144.883Jobs
31.687IN
81%EN
That number is real. WorkMundi's database shows 144,883 open engineer roles across the world. India has the most with 31,687 jobs, followed by the United States with 30,084. If you just finished reading one job ad and felt paralyzed by choice, you're not alone—but this scale is actually an advantage. It means you can afford to be selective.
Start by geography and language. The majority of engineer ads—117,837 of them—have the job posting text written in English. Use that as one filter, but remember: the ad text language tells you nothing about whether the role actually requires you to speak English day-to-day. Read the job description carefully. Then check which countries have the volume you're targeting. Singapore, Poland, and Australia round out the top five after India and the US.
Next, learn who's hiring. Accenture has posted 2,801 engineer roles. andurilindustries, speechify, and jobgether are also actively recruiting. If you're applying to one of these names, research their hiring patterns and interview style before you apply. That homework pays off.
When you interview, expect the question every engineer hears: 'Tell me about a time you had to debug a problem that wasn't in your job description.' Have a specific story ready—not a general one. Name the tools, the deadline pressure, and what you learned. Hiring managers listen for whether you see problem-solving as part of the role itself, not a favour.
