About the mission
We are looking for a Product Owner Cybersecurity Testing responsible for developing and managing security testing services. The role involves planning and coordinating penetration tests, supporting stakeholders, and integrating cybersecurity analysis into the software development lifecycle. The candidate should have proven experience in security consulting and a strong knowledge of information security frameworks.
Read the full description
Overview
As a Product Owner Cybersecurity Testing, you are responsible for developing, managing, and further enhancing the service around security testing within the organization. You ensure a structured and qualitative execution of these tests and ensure seamless integration into existing processes and development trajectories.Key Responsibilities
You plan, coordinate, and perform penetration tests on applications, systems, and infrastructure — both independently and in collaboration with external specialized parties.
You support internal stakeholders in determining scope and objectives, and monitor the quality of each project: from initial request and scope determination to test execution and vulnerability follow-up.
You assess reports and test results against recognized methodologies and best practices.
You take an active role in developing and following up on ethical hacking initiatives, including vulnerability disclosure and bug bounty programs.
You organize a structured and secure handling of reported vulnerabilities and collaborate with both internal teams and external researchers to correctly analyze, prioritize, and follow up on vulnerabilities.
In collaboration with architects, lead developers, and security specialists, you contribute to the integration of cybersecurity analysis into the software development lifecycle (SDLC).
You support the implementation of techniques such as Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST), and Software Composition Analysis (SCA).
You actively follow developments in the field and explore new approaches, methodologies, and technologies — such as hybrid testing forms and emerging testing techniques.
Skills & Experience
Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications, ...
Proven expertise in the specific knowledge domain of information security (e.g., implementing information security management processes, conducting vulnerability analyses and penetration tests).
Proven experience in analyzing, optimizing, and documenting security processes and governance.
Proven experience with security management techniques and/or frameworks (e.g., ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense).
Proven knowledge and experience through certificates depending on the domain of expertise (e.g., CISM, CISSP, CEH).
Languages
Language requirement: Fluent in Dutch at European CEFR level C2.
Additional Info
Interviews will take place within two weeks following the submission deadline.
The external employee works from their own laptop with virtual access to the environments of Digitaal Vlaanderen.
Indexing within the duration of this request is possible after at least 1 year, according to the guidelines of Digitaal Vlaanderen and with prior coordination on this.
What you'll do
- Je plant, coördineert en voert penetratietesten uit op applicaties, systemen en infrastructuur — zowel zelf als in samenwerking met externe gespecialiseerde partijen.
- Je ondersteunt interne stakeholders bij het bepalen van scope en doelstellingen, en bewaakt de kwaliteit van elk traject: van initiële aanvraag en scopebepaling over testuitvoering tot rapportering en kwetsbaarheidsopvolging.
- Je toetst rapporten en testresultaten aan erkende methodologieën en best practices.
- Je neemt een actieve rol op in de uitbouw en opvolging van ethical hacking initiatieven, waaronder vulnerability disclosure- en bug bounty programma's.
- Je organiseert een gestructureerde en veilige behandeling van gemelde kwetsbaarheden en werkt hiervoor samen met zowel interne teams als externe onderzoekers om kwetsbaarheden correct te analyseren, prioriteren en opvolgen.
- In samenwerking met architecten, lead developers en securityspecialisten draag je bij aan de integratie van cybersecurityanalyse in de softwareontwikkelcyclus (SDLC).
- Je ondersteunt de implementatie van technieken zoals Static Application Security Testing (SAST), Dynamic Application Security Testing (DAST) en Software Composition Analysis (SCA).
- Je volgt actief evoluties binnen het domein op en onderzoekt nieuwe benaderingen, methodieken en technologieën — zoals hybride testvormen en opkomende testtechnieken.
What we're looking for
- Aantoonbare ervaring als Security Consultant binnen één van volgende omgevingen: data, infrastructuur, applicaties, ...
- Aantoonbare expertise in specifiek kennisdomein van information security (bv. implementeren van information security management processen, uitvoeren van kwetsbaarheidsanalyses en pentesten).
- Aantoonbare ervaring in het analyseren, optimaliseren en documenteren van security processen en governance.
- Aantoonbare ervaring van security beheer technieken en of raamwerken (bv: ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense).
- Aantoonbare kennis en ervaring via certificaten afhankelijk van domein van expertise (bv CISM, CISSP, CEH).
Skills
- Security Consultant Experience
- Analyzing and Documenting Security Processes
- Penetration Testing Experience
- Information Security Expertise
- Knowledge of Industry Standards
- Knowledge of Secure Development Lifecycle
- Web and Application Security Knowledge
- Product Owner Experience
- Security Management Techniques
- Infrastructure Knowledge
- Programming and Scripting Skills