# Cybersecurity Engineer at Relu

> Location unclear · Unspecified · Security · open. Source: https://alderhq.app/jobs/personio%3Arelu%3A2842269 (read 2026-11-09).

## Facts (observed)

- Company: [Relu](https://alderhq.app/companies/relu)
- Location text: Leuven
- Where it can be done from (inferred): Location unclear (evidence: "Location: Leuven")
- Posted: 2026-10-14 (26 days ago)
- First seen by alder: 2026-11-04 · last verified: 2026-11-08
- Reposted: 0 times · edited: 0 times
- Apply on the employer's site: https://relu.jobs.personio.de/job/2842269
- Skills listed (inferred): AWS, Kubernetes, Docker, Terraform

## Pay and sponsorship

- Posted pay: not posted

## Description (the employer's text)

### Your mission

We're looking for a Cybersecurity Engineer to own our Platform / Software security. You will:

- Build our ISMS from the ground up — scope, risk assessment, Statement of Applicability, and core policies — and lead us through ISO 27001 Stage 1 audit
- Get Vanta green across every system, with a live Trust Center that takes manual security questionnaires off sales' plate for good
- Run a penetration test and close every critical and high finding before it becomes someone else's problem
- Stand up vulnerability management across code, dependencies, containers, and Terraform — with a triaged backlog and fix deadlines that actually get met
- Harden our AWS and Kubernetes baseline with least-privilege access, network segmentation, and threat-detection piped straight to on-call
- Write and tabletop-test our incident response playbook, GDPR 72-hour breach notification included, and align it with our MDR technical documentation so we run one evidence set — not two
### Your profile

- 2–5 years of hands-on cybersecurity engineering experience, including vulnerability assessment, threat modeling, and incident response
- Solid command of AWS security — IAM policies, network segmentation, secrets management
- Proficiency with security tooling: SIEM platforms, IDS/IPS, and penetration testing frameworks like Burp Suite or Metasploit
- Experience securing software development pipelines (SAST, DAST, dependency scanning) and working within a DevSecOps culture
- Working knowledge of compliance frameworks such as ISO 27001, SOC 2, or GDPR — ideally in a SaaS or healthtech context
- Ability to write and maintain security policies, runbooks, and incident response playbooks that people actually use
The 'Nice-to-haves':

- Experience in a regulated industry — healthcare, medtech, or dental — with exposure to HIPAA or MDR requirements
- Familiarity with zero-trust architecture and modern identity solutions like Auth0
- Hands-on experience with container security (Docker, Kubernetes) and IaC scanning tools like Checkov
- Relevant certifications: CEH, OSCP, CISSP, or AWS Security Specialty
How you work:

- You take ownership and bring a builder mindset — you're comfortable defining security practices from scratch in a fast-moving environment, not just maintaining what already exists
- You balance thoroughness with pragmatism — you know when to move fast and when the moment calls for slowing down and doing it right
### Why us?

- A mission that matters: we're improving dental care and making higher-quality dentistry accessible to everyone, globally
- A fast-growing company where your growth goes hand-in-hand with ours — real impact, real ownership, and skills in the technologies of the future
- A driven and collaborative team
- Fun team culture: after-works, bi-weekly sports, hackathons, retreats

---
Data: alder (https://alderhq.app). Cite https://alderhq.app/jobs/personio%3Arelu%3A2842269 and the date you read it. Observed facts come from the employer's own listing; location reach, level, family and skills are inferences.