{"id":84426,"title":"Cybersecurity Engineer","company":"Relu","city":null,"region":null,"location":"Leuven","work_model":"unknown","employment_type":"full_time","employment":["full_time"],"roles":["security"],"visa":"not_mentioned","relocation":"not_mentioned","posted_at":"2026-10-14T11:59:03+00:00","tools":["AWS","IAM","SIEM","Penetration Testing","Burp Suite","Metasploit","ISO 27001","SOC"],"seniority":"mid","years_experience_min":2,"german_requirement":"not_mentioned","german_level":"unspecified","english_requirement":"required","english_level":"unspecified","team_language":"unknown","confidence":0.4,"method":"rules","language_badge":"Not stated","language_evidence":null,"requirements_snippet":"What you should bring to the team: 2–5 years of hands-on cybersecurity engineering experience, including vulnerability assessment, threat modeling, and incident response Solid command of AWS security — IAM policies, network …","url":"https://relu.jobs.personio.de/job/2842269","source":"personio","agency":null,"description_text":"Your mission\nAre you passionate about technology with a purpose? Want to make a meaningful impact on people's health? At Relu, we're growing - and we're looking for someone like you.\n\nWe're looking for a Cybersecurity Engineer to own our Platform / Software security. You will:\n• Build our ISMS from the ground up — scope, risk assessment, Statement of Applicability, and core policies — and lead us through ISO 27001 Stage 1 audit\n• Get Vanta green across every system, with a live Trust Center that takes manual security questionnaires off sales' plate for good\n• Run a penetration test and close every critical and high finding before it becomes someone else's problem\n• Stand up vulnerability management across code, dependencies, containers, and Terraform — with a triaged backlog and fix deadlines that actually get met\n• Harden our AWS and Kubernetes baseline with least-privilege access, network segmentation, and threat-detection piped straight to on-call\n• Write and tabletop-test our incident response playbook, GDPR 72-hour breach notification included, and align it with our MDR technical documentation so we run one evidence set — not two\n\nYour profile\nWhat you should bring to the team:\n• 2–5 years of hands-on cybersecurity engineering experience, including vulnerability assessment, threat modeling, and incident response\n• Solid command of AWS security — IAM policies, network segmentation, secrets management\n• Proficiency with security tooling: SIEM platforms, IDS/IPS, and penetration testing frameworks like Burp Suite or Metasploit\n• Experience securing software development pipelines (SAST, DAST, dependency scanning) and working within a DevSecOps culture\n• Working knowledge of compliance frameworks such as ISO 27001, SOC 2, or GDPR — ideally in a SaaS or healthtech context\n• Ability to write and maintain security policies, runbooks, and incident response playbooks that people actually use\n\nThe 'Nice-to-haves':\n• Experience in a regulated industry — healthcare, medtech, or dental — with exposure to HIPAA or MDR requirements\n• Familiarity with zero-trust architecture and modern identity solutions like Auth0\n• Hands-on experience with container security (Docker, Kubernetes) and IaC scanning tools like Checkov\n• Relevant certifications: CEH, OSCP, CISSP, or AWS Security Specialty\n\nHow you work:\n• You take ownership and bring a builder mindset — you're comfortable defining security practices from scratch in a fast-moving environment, not just maintaining what already exists\n• You balance thoroughness with pragmatism — you know when to move fast and when the moment calls for slowing down and doing it right\n\nWhy us?\n• A mission that matters: we're improving dental care and making higher-quality dentistry accessible to everyone, globally\n• A fast-growing company where your growth goes hand-in-hand with ours — real impact, real ownership, and skills in the technologies of the future\n• A driven and collaborative team\n• Fun team culture: after-works, bi-weekly sports, hackathons, retreats","responsibilities_text":"Are you passionate about technology with a purpose? Want to make a meaningful impact on people's health? At Relu, we're growing - and we're looking for someone like you.\nWe're looking for a Cybersecurity Engineer to own our Platform / Software security. You will:\n• Build our ISMS from the ground up — scope, risk assessment, Statement of Applicability, and core policies — and lead us through ISO 27001 Stage 1 audit\n• Get Vanta green across every system, with a live Trust Center that takes manual security questionnaires off sales' plate for good\n• Run a penetration test and close every critical and high finding before it becomes someone else's problem\n• Stand up vulnerability management across code, dependencies, containers, and Terraform — with a triaged backlog and fix deadlines that actually get met\n• Harden our AWS and Kubernetes baseline with least-privilege access, network segmentation, and threat-detection piped straight to on-call\n• Write and tabletop-test our incident response playbook, GDPR 72-hour breach notification included, and align it with our MDR technical documentation so we run one evidence set — not two","requirements_text":"What you should bring to the team:\n• 2–5 years of hands-on cybersecurity engineering experience, including vulnerability assessment, threat modeling, and incident response\n• Solid command of AWS security — IAM policies, network segmentation, secrets management\n• Proficiency with security tooling: SIEM platforms, IDS/IPS, and penetration testing frameworks like Burp Suite or Metasploit\n• Experience securing software development pipelines (SAST, DAST, dependency scanning) and working within a DevSecOps culture\n• Working knowledge of compliance frameworks such as ISO 27001, SOC 2, or GDPR — ideally in a SaaS or healthtech context\n• Ability to write and maintain security policies, runbooks, and incident response playbooks that people actually use\nThe 'Nice-to-haves':\n• Experience in a regulated industry — healthcare, medtech, or dental — with exposure to HIPAA or MDR requirements\n• Familiarity with zero-trust architecture and modern identity solutions like Auth0\n• Hands-on experience with container security (Docker, Kubernetes) and IaC scanning tools like Checkov\n• Relevant certifications: CEH, OSCP, CISSP, or AWS Security Specialty\nHow you work:\n• You take ownership and bring a builder mindset — you're comfortable defining security practices from scratch in a fast-moving environment, not just maintaining what already exists\n• You balance thoroughness with pragmatism — you know when to move fast and when the moment calls for slowing down and doing it right","status":"open","duplicate_of":null,"first_seen":"2026-11-04T00:29:24.233346+00:00","responsibilities_summary":null,"requirements_summary":null,"all_tools":["AWS","IAM","SIEM","Penetration Testing","Burp Suite","Metasploit","ISO 27001","SOC","Zero Trust","Docker","Kubernetes","Infrastructure as Code","Terraform"],"posting_language":"en","evidence":[],"years_experience_max":5,"mobility_evidence":[],"model_version":"rules-8","english_badge":"English required","company_id":2846}