Secure Software/AppSec Consultant

Line of Service

Assurance

Industry/Sector

Not Applicable

Specialism

Assurance

Management Level

Senior Associate

Job Description & Summary

Contribute to creating a better tomorrow

The only way we can tackle the challenges of this fast-changing world is with passionate people. Led by our purpose of building trust and solving important problems, we come together at PwC to address the biggest issues facing the world in a way that drives positive impact.  Are you eager to join a team fuelled by open and curious minds? People who are passionate about their work and create new solutions for a new day? Then you’re at the right place. 

Bring your talent. Learn new skills. Make a positive impact. 

Want to delve into the intriguing world of cybersecurity? Our PwC Cybersecurity, Privacy & Resilience (CPR) team helps clients protect their data and minimise the risk of a cyberattack. The huge amount of data that’s generated and shared within and across organisations is increasingly valuable to businesses and to skilled cyber criminals. The exponential growth and sophistication of cyber threats has made an effective cybersecurity strategy a critical business requirement. Helping organisations with privacy compliance is also a crucial part of what we do. If you’re interested in working in a fast-paced, exciting field where you can really make a difference, join our diverse, fun and supportive CPR team on the front lines of cyber and privacy protection!

Your impact

As a Secure Software Consultant, you will play a vital role in enhancing the security posture of our clients' software by performing code reviews, supporting DevSecOps practices, conducting threat modelling, and participating in architectural reviews. You will leverage your software development skills to identify vulnerabilities and recommend secure coding practices, thereby driving the implementation of robust security measures throughout the software development lifecycle.

• Code Reviews:

  - Conduct thorough and systematic code reviews to identify security vulnerabilities and ensure adherence to secure coding standards. - Collaborate with development teams to provide actionable feedback and recommendations for improving code quality.

• DevSecOps Support: - Integrate security tools and practices into the DevOps pipeline to automate security testing and monitoring. - Assist in configuring and maintaining security tools, and work with teams to enhance security measures in CI/CD processes.

• Threat Modelling: - Perform threat modelling to identify and evaluate potential security threats and vulnerabilities within software applications. - Develop and communicate threat mitigation strategies to stakeholders.

• Architectural Reviews: - Participate in architectural reviews to assess the design and structure of software applications for security risks. - Provide guidance on secure architectural patterns and best practices.

• Collaboration and Communication: - Work closely with cross-functional teams including developers, IT, and product managers to support security initiatives. - Prepare and deliver reports and presentations on security findings, recommendations, and risk assessments.

About You

• Bachelor's degree in Computer Science, Information Technology, or a related field.

• Minimum of 2 years of experience in software development.

• Proficiency in Dutch and English is a must

• Proficiency in Java, .NET, and JavaScript and popular front-end frameworks is mandatory.

• Familiarity with other programming languages such as C, Swift, Rust, and PHP is a plus.

• Solid understanding of software development lifecycle (SDLC) and agile methodologies.

• Basic knowledge of cybersecurity principles and practices.

• Familiarity with common security tools and platforms used in DevSecOps.

• Familiarity with Linux, Kubernetes and cloud-native architectures is a plus.

• Strong analytical and problem-solving skills with attention to detail.

• Excellent communication and interpersonal skills.

Preferred Qualifications:

• Experience with secure coding practices and security frameworks (e.g., OWASP).

• Familiarity with cloud platforms and security considerations in cloud environments.

• Certifications such as Certified Secure Software Lifecycle Professional (CSSLP) or equivalent are a plus.

Life at PwC Belgium

Our culture and workplace are something we’re proud of. Here’s a sneak peek at what life at PwC looks like:

• Flexible work patterns: Achieve the perfect balance between office and home life with our flexible hybrid work arrangements and family-friendly schemes.

• Lifelong learning: Grow with us! Take advantage of our diverse training opportunities and exciting career pathways to explore new disciplines and expertise.

• Flexible rewards: Tailor your benefits to suit your lifestyle with our customizable rewards plan.

• Sustainable mobility: Choose eco-friendly mobility options, from our soon-to-be fully electrified fleet to public transport, shared cars, ebikes, and more.

• Inclusive culture: Thrive in a diverse, inclusive workplace that values and celebrates every individual's contributions.

• Wellbeing focus: Enjoy a positive environment with our comprehensive wellbeing programs, engaging sports communities, and confidential support for all your professional and personal challenges.

• Global network: Expand your horizons with opportunities to work abroad and tap into extensive industry expertise within the PwC network.

Let’s build something great together. What are you waiting for?

Equal Opportunity Employer statement

At PwC, we are dedicated to building a diverse, inclusive, and authentic environment. We are committed to providing equal employment opportunities for all candidates and employees, regardless of race, religion, gender identity or expression, sexual orientation, national origin, age, disability, marital status, or any other characteristic protected by law.

We believe that a diverse and inclusive workplace drives innovation and strengthens our ability to serve our people, clients and communities. Join us in fostering a culture where everyone feels valued, respected and empowered to achieve their full potential.

Additionally, we provide reasonable accommodations to qualified individuals with disabilities, in accordance with applicable laws.

Education (if blank, degree and/or field of study not specified)

Degrees/Field of Study required:

Degrees/Field of Study preferred:

Certifications (if blank, certifications not specified)

Required Skills

Optional Skills

Accepting Feedback, Accepting Feedback, Active Listening, Agile Methodology, Analytical Thinking, Azure Data Factory, Communication, Creativity, Cybersecurity, Cybersecurity Framework, Cybersecurity Policy, Cybersecurity Requirements, Cybersecurity Strategy, Embracing Change, Emotional Regulation, Empathy, Encryption Technologies, Inclusion, Intellectual Curiosity, Learning Agility, Managed Services, Optimism, Privacy Compliance, Regulatory Response, Security Architecture {+ 8 more}

Desired Languages (If blank, desired languages not specified)

Travel Requirements

Up to 20%

Available for Work Visa Sponsorship?

No

Government Clearance Required?

Yes

Job Posting End Date