Security & Compliance Engineer/Officer | Bnewable [30-40 EUR/h B2B]

Bnewable is an independent Belgian energy company specializing in energy storage and energy management. They develop the Voltana platform, which is based on AI and optimizes stationary battery energy storage systems for large commercial and industrial clients in Belgium and Germany. The company has experienced entrepreneurs and specialists in renewable energy, aiming to support companies in energy transition and sustainable development.

• Minimum 4 years of experience in corporate security including software engineering for microservices and cloud systems (preferably Google Cloud Platform with IAM, VPC, network, Cloud Armour etc.)
• Experience with vendor risk assessment and management
• Understanding of laws, norms, and standards and ability to implement them and provide training
• Experience or knowledge in penetration testing
• Continuous self-development and following security trends
• Assertiveness and ability to enforce agreed security requirements
• Documented skills in diagnosing complex system security problems and problem-solving

Nice to have:

• People management experience and potential growth towards IT team leadership
• Practical experience with AI/ML frameworks (including Claude Code, OpenAI, RAG)
• Familiarity with Docker, Kubernetes, energy sector, and PostgreSQL

• Manage security aspects of company servers and systems, maintaining existing and implementing new security solutions
• Continuously check security measures for compliance with standards such as NIS2 and ISO27001 (nice to have)
• Develop and expand tools to improve and monitor system operations
• Manage data access including creating, verifying, and suspending user accounts
• Update technical documentation
• Conduct security training for programming and system operations
• Collaborate closely with Software Engineering and Support & QA teams
• Support audit processes
• Coordinate certification processes and vendor risk management, including vendor risk assessment
• Perform penetration tests
• Address security issues related to product, software development lifecycle (SDLC) security, policy, architecture review, threat modeling, SaaS tools, office solutions, and MS365 / EntraID etc.
• Apply best engineering practices and leverage AI tools to improve security, quality, and work efficiency, including coordinating penetration tests

Recruitment process steps include: a 30-minute pre-interview with a recruiter (Google Meets), a 1-hour technical interview with CTO (Teams), a 1-hour case study discussion with CTO (Teams, no coding), a final 45-minute interview with HR and Co-founder(s), followed by decision. Data processing includes consent for recruitment and legal compliance under GDPR by Bee Talents PSA, Poznań.