Application security engineer in digital commerce

Hexa Consulting; Lisboa; In loco; EUR 55.000 - 90.000; Tempo pieno

Vantaggi offerti da questo lavoro

Private health insurance

Continuous training and certification

Flexible work arrangements

Descrizione del lavoro

Hexa Consulting is seeking a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. You will focus on security controls, secure design, vulnerability management and integrating security into Agile software delivery.

You will act as the security reference for product teams, coordinate with cybersecurity, IT, development, and partners, and drive continuous security improvements across platforms.

Competenze

• At least 4 years of experience in Security Engineering in digital, e-commerce or software environments.
• Strong knowledge of information security across Internet, Extranet and Intranet systems.
• Hands-on web app security, vulnerability scanning and penetration testing experience.
• Solid secure coding principles and vulnerability mitigation understanding.
• Ability to work independently in an Agile, international setting.
• Excellent communication to collaborate with cross-functional teams.
• English proficiency at professional working level.

Mansioni

• Act as security reference for digital product teams and coordinate with cybersecurity, IT, dev, ops and partners.
• Support implementation and improvement of security controls across platforms and services.
• Ensure digital solutions follow security policies and secure practices.
• Plan and coordinate security testing, including pen tests and vulnerability reviews.
• Support remediation, secure coding and secure deployment practices.
• Collaborate with DevOps and QA to enhance automated security testing in CI/CD.
• Document and promote hardening procedures for web components and middleware.
• Participate in security audits and data protection assessments.
• Maintain security processes, controls and incident management procedures.
• Provide guidance and training to internal teams and partners.

Conoscenze

Web application security

Information security principles

Vulnerability scanning

Penetration testing

Incident response

OWASP Top 10

Secure coding

CI/CD security testing

GitLab

SonarQube

Snyk

OIDC

AWS IAM policies

AWS/Azure/GCP

Java

JavaScript

Web and mobile security

Agile delivery practices

Security audits

Formazione

Bachelor’s or Master’s degree in Computer Science or Software Engineering

Strumenti

GitLab

SonarQube

Snyk

Descrizione del lavoro

Описание:

We are looking for a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. This role focuses on security controls, secure design, vulnerability management and the integration of security practices into Agile software delivery.

Задачи:

• Act as the security reference for digital product teams, coordinating security topics with cybersecurity, IT, development, operations and external partner teams.
• Support the implementation and continuous improvement of security controls across digital platforms and services.
• Ensure that digital solutions follow applicable security policies, standards and secure implementation practices.
• Plan, coordinate and follow up on security testing activities, including penetration testing, vulnerability scanning and security intelligence reviews.
• Support development and operations teams in vulnerability remediation, secure coding and secure deployment practices.
• Collaborate with DevOps and QA teams to improve automated security testing within CI/CD pipelines.
• Define, document and promote hardening procedures for web-related IT components and middleware layers.
• Participate in security audits and assessments related to data protection, e-commerce and digital platform requirements.
• Maintain security processes, controls and incident management procedures.
• Provide guidance, training and coaching to internal teams and partners to promote secure design and implementation.
• Coordinate security-related activities across multiple stakeholders and contribute to continuous cybersecurity improvement.

Требования:

At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce or software-based environments.

Strong background in information security principles and practices, including IT and web security across Internet, Extranet and Intranet systems.

Hands-on experience with web application security, vulnerability scanning, penetration testing and incident response.

Solid understanding of secure coding principles and common web vulnerability mitigation.

Ability to work independently in a fast-paced Agile and international environment.

Strong analytical thinking, problem-solving capability and pragmatic security decision-making.

Excellent communication skills and ability to collaborate with multinational, cross-functional teams.

Proactive, self-driven mindset and motivation to keep learning new technologies.

Bachelor's or Master's degree in Computer Science, Software Engineering or a related field.

Professional working proficiency in English.

• Web application security
• Information security principles and practices
• Vulnerability scanning and penetration testing
• Incident response
• OWASP Top 10
• Secure coding principles
• Security hardening procedures
• CI/CD security testing
• GitLab, SonarQube and Snyk
• OIDC, openFGA and AWS IAM policies
• AWS, Azure or GCP
• Java and JavaScript
• Web and mobile application security
• Agile delivery practices
• Security audits and assessments

Будет плюсом:

• Experience in digital commerce environments
• French or another additional language
• Exposure to security intelligence reviews

Условия:

• Private health insurance from day one, with no waiting period and optional family extension.
• Confidential mental health support through TEAM 24, including access to psychological support, content and live sessions.
• Continuous training and certification opportunities to support structured growth and long-term capability development.
• Flexibility whenever the role and delivery context allow it, supporting sustainable performance and daily balance.
• Childcare vouchers and practical support measures designed to help balance personal and professional life.
• Community moments, shared milestones and leadership presence when it matters most.
• Opportunities to develop further capability in information security, AI governance and cybersecurity best practices.