Billit is a fintech SaaS platform providing compliant electronic invoicing and secure financial workflow infrastructure for businesses, governments and financial institutions.
Founded in Belgium in 2014, we've grown into one of the leading electronic invoicing platforms in our homeland and are expanding internationally as well, supporting hundreds of thousands of businesses and processing tens of millions of invoices annually.
Behind our product is a close-knit team of people who believe digitization, efficiency and humanity go hand in hand.
Are you the architect behind our application security?
As a fintech SaaS company, we operate in a heavily regulated environment - think DORA and ISO 27001. That’s why we’re expanding our development team with someone who:
• builds our application security in a way that fits an ambitious scale-up
• and sees security not as a brake, but as an integral part of how we build.
What does an Application Security Engineer do at Billit?
You’re responsible for raising the security bar across our web applications and embedding security throughout our entire development process. You work closely with the development squads, the QA team, and the Enterprise Architect. You report to the Head of Development & QA.
This isn’t a role where everything is already in place: you actively help build out the scalability of our secure development cycle. That means combining hands-on execution with bringing structure and anticipating what still needs to be built.
In practice:
• You perform technical analyses of incoming vulnerability reports and responsible disclosure submissions.
• You validate, reproduce, and resolve security vulnerabilities.
• You develop and implement security improvements across our web applications.
• You design and implement complex security requirements and secure-by-design solutions.
• You analyze and remediate findings from SAST, DAST, dependency scanning, and other security tooling.
• You provide technical support to development teams on secure coding, security architecture, and remediation.
• You collaborate with external pentesters to clarify and resolve technical findings.
• You actively contribute to the further development of our Application Security roadmap and tooling.
Who are you?
• You have at least a few years of relevant experience in application security and can independently manage and execute your work on a daily basis.
• You’re familiar with security concepts such as OWASP, secure coding principles, and penetration testing.
• You have hands-on experience with automated security tooling such as SAST, DAST, and dependency scanning.
• You’re familiar with - or ready to quickly get up to speed on - DORA and ISO 27001 as regulatory frameworks.
• Relevant certifications (OSCP, CEH, CISSP…) are a strong asset but not required.
• You communicate fluently in English, preferably also in Dutch.
What’s in it for you?
• Impact: you help build a mature application security practice at a fast-growing Belgian fintech company.
• Growth: room for personal development and an environment that rewards initiative.
• An ambitious company with a lot of drive and an international mindset.
• Flexible hours and a hybrid work arrangement that fits the way you work best.
• A salary that reflects your talent and expertise.
Ready to help build the secure future of Billit and our users?
Talk soon!