Application Security Compliance Engineer (senior consultant)

General Information

Press space or enter keys to toggle section visibility

Company Deloitte Business Unit Enabling Functions Primary Location Zaventem Field of interest Technology Industry Focus Industry Agnostic Recruiter Al-Mbaidin, Kais - kalmbaidin@deloitte.com

Description of the position

Press space or enter keys to toggle section visibility

Can’t wait to make an impact on the world? You’re not alone. Join us in driving progress in the working world and beyond. Your journey with us
The Application Security Compliance Engineer will play a key role in safeguarding the organization’s applications and systems by ensuring adherence to global and industry security standards. This role involves reviewing security documentation for new and existing applications, assessing their compliance posture, and providing expert guidance on remediation and secure development practices. The ideal candidate will have deep knowledge of application security, penetration testing methodologies, and secure software development lifecycle (SSDLC) frameworks.
Key Responsibilities:

• Review and assess security documentation (e.g., security design reviews, risk assessments, and threat models) for new and existing applications.
• Ensure that applications comply with internal Global Security Standards and external industry frameworks (e.g., ISO 27001, NIST, OWASP).
• Collaborate with application development teams to integrate security into all stages of the SSDLC.
• Analyze and validate results from DAST, SAST, and Open Source Software (OSS) scanning tools, ensuring findings are accurate and risk-prioritized.
• Review and validate penetration testing findings, providing guidance on remediation steps and challenging results when discrepancies arise.
• Partner with pen test teams, developers, and project managers to track and close security findings within defined timelines.
• Provide expert advice on secure coding practices and assist in the evaluation of security controls in new applications or technologies.
• Stay current with emerging threats, vulnerabilities, and application security trends.
• Contribute to continuous improvement of the organization’s security review and testing processes.

Let's talk about you

• Bachelor’s degree in Computer Science, Information Security, or related field (or equivalent practical experience).
• 4+ years of experience in Application Security, Penetration Testing, or Security Assessment roles.
• Strong understanding of application security principles, OWASP Top 10, and common attack vectors.
• Hands-on experience with DAST, SAST, and OSS vulnerability scanning tools (e.g., Burp Suite, Snyk, Checkmarx, Fortify, SonarQube, etc.).
• Familiarity with secure coding standards and the Secure Software Development Lifecycle (SSDLC).
• Ability t