Operational Security Engineer

Keystone Solutions is hiring an Operational Security Engineer for a consultancy mission within a client's IT Security Production organisation in Brussels. As a Keystone Solutions consultant, you will represent Keystone Solutions while working on the client project, collaborating with business stakeholders, local IT teams and wider group IT partners. You will join a Mainframe System Security squad responsible for establishing security standards, ensuring their correct implementation and compliance, implementing rules to support infrastructure teams, supporting users during security-related incidents, and managing, correcting and documenting security risks identified by auditors. As a Mainframe Operational Security Engineer, you will be a key expert in keeping the client's Mainframe environment secure, compliant and resilient.

Under Keystone Solutions' consultancy model, you will:

• →Manage user permissions and access for systems outside IAM, ensuring security without blocking operations.
• →Manage the content of the RACF database, either manually or through automation.
• →Create clear security documentation and standards so teams understand what to do and why it matters.
• →Handle encryption tasks, from importing certificates to configuring technical agents for Hardware Security Modules (HSMs).
• →Assess the security of new Mainframe products, ensuring they are safe before going live.
• →Collaborate with squad members to resolve security incidents, from decoding error messages to implementing fixes with minimal disruption.
• →Support internal clients including IT Risk, Asset Owners and auditors by providing evidence for compliance and addressing audit findings.
• →Anticipate potential risks and address them before they become issues for clients.
• →Participate in the squad's on-call rotation to resolve critical job failures outside business hours, approximately one week per month, covering non-business hours including weekends and holidays during that week.

• English: mandatory.
• Dutch: preferable.
• French: preferable.

• Bachelor's degree.
• RACF Security Administrator certification: mandatory.
• zSecure RACF certification: preferable.

• Mandatory 50% on-site work in Brussels and 50% homeworking.
• Travel: not applicable.

At least 10 years of relevant experience is required.

• RACF and surrounding utilities.
• Mainframe Architecture.
• Basic Mainframe tools including JCL, ISPF, REXX and SDSF.
• Role Based Security Modelling.
• AT-TLS and certificates.
• Security of DB2, IMS, including database and transaction management, and MQ.
• Job Scheduling.
• Mainframe system subsystems and their security, including Spool, network, storage and SMF.
• Public Key Infrastructure and Mainframe CryptoCards.
• Unix System Service.

• Knowledge of the zSecure product suite.
• Knowledge of the job scheduler Control.
• Knowledge of COBOL.
• Knowledge of Endevor.

• Mandatory: cybersecurity experience, with hands-on Mainframe expertise and the drive to build it further.
• Preferable: experience in the financial sector.

• Analytical skills: ability to navigate complex scenarios involving conflicting security rules across different manuals.
• Critical thinking: ability to assess requests against security standards rather than taking them at face value.
• Problem-solving: ability to trace vague error messages back to their root cause and implement fixes.
• Creativity: ability to design custom solutions for hundreds of compliance points where no playbook exists.
• Agile mindset: ability to thrive in teamwork while taking ownership of your responsibilities, or eagerness to learn.
• Proactivity: ability to identify risks early in a high-volume environment and resolve them before they escalate.

If you are ready to tackle technical and strategic challenges in a dynamic consultancy environment, apply today at Keystone Solutions Career Portal.