Application Security Engineer – Flexible, Growth & Health Benefits

Hexa Consulting; Lisboa; On-site; EUR 55,000 - 90,000; Full time

Benefits offered by this job

Private health insurance

Continuous training and certification

Flexible work arrangements

Job summary

Hexa Consulting is seeking a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. You will focus on security controls, secure design, vulnerability management and integrating security into Agile software delivery.

You will act as the security reference for product teams, coordinate with cybersecurity, IT, development, and partners, and drive continuous security improvements across platforms.

Qualifications

• At least 4 years of experience in Security Engineering in digital, e-commerce or software environments.
• Strong knowledge of information security across Internet, Extranet and Intranet systems.
• Hands-on web app security, vulnerability scanning and penetration testing experience.
• Solid secure coding principles and vulnerability mitigation understanding.
• Ability to work independently in an Agile, international setting.
• Excellent communication to collaborate with cross-functional teams.
• English proficiency at professional working level.

Responsibilities

• Act as security reference for digital product teams and coordinate with cybersecurity, IT, dev, ops and partners.
• Support implementation and improvement of security controls across platforms and services.
• Ensure digital solutions follow security policies and secure practices.
• Plan and coordinate security testing, including pen tests and vulnerability reviews.
• Support remediation, secure coding and secure deployment practices.
• Collaborate with DevOps and QA to enhance automated security testing in CI/CD.
• Document and promote hardening procedures for web components and middleware.
• Participate in security audits and data protection assessments.
• Maintain security processes, controls and incident management procedures.
• Provide guidance and training to internal teams and partners.

Skills

Web application security

Information security principles

Vulnerability scanning

Penetration testing

Incident response

OWASP Top 10

Secure coding

CI/CD security testing

GitLab

SonarQube

Snyk

OIDC

AWS IAM policies

AWS/Azure/GCP

Java

JavaScript

Web and mobile security

Agile delivery practices

Security audits

Education

Bachelor’s or Master’s degree in Computer Science or Software Engineering

Tools

GitLab

SonarQube

Snyk

Job description

Hexa Consulting is seeking a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. You will focus on security controls, secure design, vulnerability management and integrating security into Agile software delivery.

You will act as the security reference for product teams, coordinate with cybersecurity, IT, development, and partners, and drive continuous security improvements across platforms.