About the mission
We are looking for an independent senior security consultant to support the Department of Work and Social Economy. The role involves analyzing, optimizing, and documenting security processes, with a strong focus on AWS and Java technologies.
Read the full description
Overview
The Department of Work and Social Economy (DWSE) is responsible for policy coordination and development, as well as monitoring and enforcement (inspection) of the Flemish employment policy. It also supports and strengthens employment in the regular sector, the non-profit sector, and the social economy in Flanders. Through various employment programs, recognitions, and subsidies, it contributes to the promotion of employment. Finally, it manages the European Social Fund (ESF) in Flanders. We are looking for an independent senior security consultant (freelancer, or an employee of a company that works independently from our current IT suppliers).Key Responsibilities
Proven experience in Testing in a continuous integration environment
Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications, ...
Proven experience in analyzing, optimizing, and documenting security processes and governance
Proven experience with AWS
Proven experience with Java
Proven expertise in a specific knowledge domain of information security
Skills & Experience
Must have
Proven experience in Testing in a continuous integration environment
Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications, ...
Proven experience in analyzing, optimizing, and documenting security processes and governance
Proven experience with AWS
Proven experience with Java
Proven expertise in a specific knowledge domain of information security
Should have
Proven knowledge of IntelliJ, Git, and SonarQube.
Proven experience within the Flemish Government
Proven experience of security management techniques and/or frameworks (e.g., ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
Proven knowledge and experience via certificates depending on the domain of expertise (e.g., CISM, CISSP, CEH).
Proven knowledge of Docker and Kubernetes
Nice to have
Proven experience as an advisor with strong communication skills, very customer-oriented
Proven experience in a specific knowledge domain of information security (e.g., implementing IS management processes, conducting vulnerability analyses and penetration tests, optimizing application security using cost-effective means, ...)
Proven experience in a specific knowledge domain of information security (e.g., optimizing IS governance, developing and implementing a cybersecurity action plan, defining risk appetite in consultation with the Vo,...)
Proven experience with Integration & service architectures (API management, SOA & microservices, ESB/EAI, REST)
Proven experience of security management techniques and/or frameworks (e.g., ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
Proven knowledge of specific security tools for vulnerability analyses, penetration tests, PAM (e.g., CyberArk), Encryption (e.g., Voltage).
Experience with cybersecurity attacks and mitigation methods
Familiarity with one or more SAST, DAST, and IAST tools such as Veracode, Coverity, Fortify, or AppScan
Languages
Language requirement: Dutch at European CEFR level C2.
Additional Info
Number requested: 1
Preferred start date: 02/03/2026
Preferred end date: 28/02/2027
Assignment type: Framework contract 2022 - 2027 (Lot 1)
Cost center: -
Working hours: Day
Estimated number of hours per person: 1680
Employment percentage: 100
Remote work possible? Yes
What you'll do
- Proven experience in Testing in a continuous integration environment
- Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications
- Proven experience in analyzing, optimizing, and documenting security processes and governance
- Proven experience with AWS
- Proven experience with Java
- Proven expertise in a specific knowledge domain of information security
What we're looking for
- Proven experience in Testing in a continuous integration environment
- Proven experience as a Security Consultant in one of the following environments: data, infrastructure, applications
- Proven experience in analyzing, optimizing, and documenting security processes and governance
- Proven experience with AWS
- Proven experience with Java
- Proven expertise in a specific knowledge domain of information security
- Proven knowledge of IntelliJ, Git, and SonarQube
- Proven experience within the Flemish Government
- Proven experience of security management techniques and/or frameworks (e.g., ISO27000 series, COBIT for Security, NIST, OWASP, CIS Critical Security Controls for Effective Cyber Defense)
- Proven knowledge and experience via certificates depending on the domain of expertise (e.g., CISM, CISSP, CEH)
- Proven knowledge of Docker and Kubernetes
Skills
- AWS
- Java
- IntelliJ
- Git
- SonarQube
- Docker
- Kubernetes