Cybersecurity recruitment
Our longest track record, and the discipline where most of our references come from: architects, CISOs, GRC and audit professionals, and now the specialists who secure AI, permanent and freelance, in Belgium and across Europe.
CISO · Deputy CISO · Head of Security · Security Manager · Head of GRC
Security architecture · Cloud security engineer · Network security · IAM engineer · AppSec
SOC analyst L2/L3 · Detection engineer · Incident responder · Threat intelligence · Forensics
IT auditor · Risk officer · NIS2 / DORA / ISO 27001 specialists · Privacy & data protection
AI security engineer · LLM & AI red teaming · securing AI models and data · AI-driven threat detection · AI risk & EU AI Act

Knowing when to stop
A client asked us to find a SOC expert. We sent strong candidates, one after another, but feedback sometimes took weeks. We kept pushing to move things forward and suggested meeting in person. Twice, the HR contact did not come to the meeting, even though it was on their own premises.
When we finally talked it through, it became clear the company was dealing with internal problems that were holding the process back. Together with the client, we agreed it was better to stop there than to keep putting in effort we knew was not going anywhere.
What we learnedAs external recruiters, we can only go so far: candidates and recruiters cannot fix a company’s internal problems. Filling a position takes effort from everyone, so both sides need to be clear about their roles, the timing and the real situation from the start.
- The regulatory wave — NIS2, DORA — created demand for governance profiles faster than the market could produce them. We help shape those roles so they match the people who are really out there.
- Strong architects are rarely looking. They move for scope and for a manager they respect, not for a job advert.
- Consultancy and end-client roles attract different people, and the pitch has to change accordingly.
- Clearance, language and sector experience narrow a Belgian shortlist faster than any technical requirement.
Here the interesting signal is restraint. The strongest people have automated triage, documentation review and reporting — and are explicit about what must never leave the environment, and about how they verify a confident-sounding finding before it becomes a recommendation.
How we assess that“Among the many headhunters I have dealt with, I was impressed by her competence, patience and empathy.”

