Operation Security Engineer Cryptography - Permanent

Collective

Brussel, Belgium

28 days ago

Apply on be.indeed.com

Prepare application

Role details

Contract type

Permanent contract

Employment type

Full-time (> 32 hours)

Experience level

Expert

Experience required

5 years minimum

Working hours

Regular working hours

Languages

Dutch, English, French

Job source

be.indeed.com

Tech stack

Microsoft Word Microsoft Excel Agile Methodology Bash Shell Cyber Security Python (Programming Language) Key Management Microsoft Office PCI Data Security Standards Public Key Infrastructure Microsoft PowerPoint Systems Integration

+4 more

Scripting System Availability Hashicorp Servicenow

Job description

Manage the lifecycle of cryptographic keys, digital certificates, and application secrets (e.g., rotation, revocation, access control).
Monitor and maintain HSM infrastructures (Adyton, nCipher, mainframe TKE) to ensure high availability and compliance.
Troubleshoot incidents and collaborate with teams to resolve security gaps in authentication, encryption, or secret storage.
Expertise & Projects
Act as a Crypto Design Authority (advise on cryptographic standards, algorithms, and best practices such as NIST, PCI-DSS, PSD2).
Lead or contribute to strategic projects, including:
Post-Quantum Cryptography (assess risks, contribute to the migration of quantum resistant solutions)
EKU Readiness (prepare systems for Extended Key Usage (EKU) compliance)
HSM Lifecycle Management (LCM) (operate HSM support and configuration)
HSM: Key Ceremonies
Crypto Agility: improve certificate and key lifecycle management processes
Platform Integration: align with Group tools (Certis, Horizon)
Partner with COE Security, Group Security, and other stakeholders like IT architects and IT application owners to translate regulatory and business requirements into technical solutions.

Requirements

Secrets management: Hashicorp Vault
Microsoft Office (Word, Excel, PowerPoint)
Preferable: Scripting (Python, Bash), ServiceNow, Rally, Portunus, Certis, Horizon, + Dutch: a plus
French: fluent spoken
English: fluent spoken and written
Telework expectation: 50% on site & 50% homeworking
Required experience: at least 5 years of relevant experience
Contract and compensation details not specified in the description provided., * At least 5 years of relevant experience
Deep IT security expertise with technical mastery of HSMs (Adyton/nCipher), PKI, Hashicorp Vault, and cryptographic standards (NIST)
Sharp operational oversight of high-availability infrastructures
Proficiency in Microsoft Office (Word, Excel, PowerPoint)
Preferable experience with scripting (Python, Bash), ServiceNow, Rally, Portunus, Adyton, nCipher, and HashiCorpVault
Ability to bridge technical and business requirements into feasible IT solutions balancing cost efficiency, compliance, and developer practicality
Experience or familiarity with Agile methodology and adaptability in a fast-evolving landscape
Strong collaboration skills and results-driven mindset working with stakeholders like IT architects, application owners, and security teams
Client-centric approach translating complex cryptographic requirements into practical, user-friendly implementations
Proactive and analytical mindset to spot risks and enhance security processes
Fluent spoken and written English and fluent spoken French; Dutch is a plus