Security Engineer

Who Are We

At CluePoints, we’re redefining how clinical trials are run.  As the premier provider of Risk-Based Quality Management (RBQM) and Data Quality Oversight software, we harness advanced statistics, artificial intelligence, and machine learning to ensure the quality, accuracy, and integrity of clinical trial data, helping life sciences organizations bring safer, more effective treatments to patients faster.

We’re proud to be an ambitious, fast-growing technology scale-up with a dynamic and diverse international team representing more than 20 nationalities. Collaboration, flexibility, and continuous learning are part of our DNA. At CluePoints, you’ll find a culture where you can grow, make an impact, and have fun along the way.

Guided by our values of Care, Passion, and Smart Disruption, we’re united by a shared mission: to create smarter ways to run efficient clinical trials and deliver AI-powered insights that improve human outcomes worldwide

The Role:
We’re looking for a Security Engineer to join our Infrastructure and Security team and contribute to our mission of transforming clinical research through data-driven insights. You’ll report to the Senior Manager, Infrastructure and Security, and this role is open to candidates based in Belgium.

What You'll Be Doing

• Run security scanning and vulnerability management across cloud infrastructure, platform, containers, applications, endpoints and SaaS tools, prioritising by real-world exploitability and business risk rather than tool severity.
• Drive remediation to closure with Engineering, SRE and IT, and report exposure and trends in terms leadership can act on.
• Secure our Azure and Kubernetes platform alongside the SRE team: set hardening baselines, review infrastructure-as-code and architecture changes, and build security checks into our delivery pipelines.
• Carry out ISO 27001:2022 control checks and keep audit-ready evidence, automating control monitoring and evidence collection wherever possible.
• Design, build and run AI-assisted workflows that cut manual effort across security operations, with guardrails built in by design.
• Help shape and deliver the security roadmap for your areas of ownership.

What You'll Bring

• 5+ years in security engineering, cloud security or a closely related field, including at least 3 years hands-on in vulnerability management or platform security.
• Proven, production experience applying AI to security operations: you have shipped it and can show what it changed.
• Hands-on experience securing cloud platforms (ideally Azure and Kubernetes/AKS) and with vulnerability, container and dependency scanning tools.
• Working knowledge of ISO 27001:2022, including testing controls and producing audit evidence.
• Scripting and automation skills (Python, PowerShell, KQL or similar), comfort with APIs and AI agents, and fluent English.

 
Nice to Have

• Experience in a regulated environment (life sciences, healthcare or fintech), with familiarity with NIS2 and SOC 2 evidence or GRC tooling.
• Experience with the Microsoft security stack (Defender, Entra ID, Purview) and knowledge of AI security frameworks such as the OWASP Top 10 for LLM Applications or ISO/IEC 42001.

What We Offer

Belgium

• Health Insurance through Alan (100% hospitalisation cover, 80% ambulatory and dental)
• Mobility Budget for eco-transport, housing, or car allowance (flexible 3-pillar system)
• Group Insurance Plan with 6–12% employer pension contribution based on seniority
• Meal Vouchers (€8/day) and Eco Vouchers for sustainable purchases
• A hub-based hybrid model that blends flexibility with purpose — connecting teams through collaboration, learning, and a vibrant social culture.

 
 Equal Opportunities & GDPR NoticeCluePoints is an equal opportunities employer.
We value and respect diversity in our workforce and do not tolerate discrimination based on gender, age, disability, ethnic origin, religion, sexual orientation, or any other protected ground under Belgian law.
Personal data collected as part of your application will be processed in compliance with the EU GDPR and Belgian data protection legislation.

You have the right to access, correct, or delete your personal data at any time by contacting [email protected].