QA Security Engineer: Python Automation & API Testing | Hybrid

Natixis; Porto; Híbrido; EUR 45 000 - 65 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

a Green Transportation Budget

electric bikes

a flexible Hybrid Work Policy

Honolulu Wellness Club

Prayer Room

Lactation Room

themed Villages

Resumo da oferta

Natixis in Portugal, a Centre of Expertise within Groupe BPCE, is seeking a QA Security Engineer to strengthen the quality and security of its applications throughout the software lifecycle. You will apply Python automation, API testing, and security best practices in a collaborative environment.

You will define testing strategies, integrate security into the SDLC, and work closely with developers and architects to identify vulnerabilities, validate controls, and improve overall risk management

Qualificações

• 3+ years in QA, test automation, or app security.
• Strong Python scripting skills for automation.
• Experience with REST and SOAP API testing.
• Knowledge of web app and API security risks.
• Experience integrating tests into CI/CD pipelines.

Responsabilidades

• Define and implement functional, automated, and security testing strategies for applications and services.
• Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.
• Develop and maintain test automation scripts and frameworks, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.
• Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.
• Assess the quality, reliability, and security of integrations between applications, services, and databases.
• Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.
• Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

Conhecimentos

Python scripting

Test automation

API testing

Application security

CI/CD security

OWASP

Agile

SQL validation

Data analysis

Ferramentas

SAST tools

DAST tools

REST API testing tools

MySQL

PostgreSQL

Oracle

Descrição da oferta de emprego

Natixis in Portugal, a Centre of Expertise within Groupe BPCE, is seeking a QA Security Engineer to strengthen the quality and security of its applications throughout the software lifecycle. You will apply Python automation, API testing, and security best practices in a collaborative environment.

You will define testing strategies, integrate security into the SDLC, and work closely with developers and architects to identify vulnerabilities, validate controls, and improve overall risk management