Security Engineer

EPAM Systems; Lisboa; Presencial; EUR 50.000 - 80.000; Jornada completa

Descripción de la vacante

Richemont in Lisbon seeks a Security Engineer to bridge compliance and technical resilience across Unified Commerce and Client Care platforms. You will drive secure design, implement automated security testing in DevOps, harden web components, and coordinate audits, training and incident management with multiple teams and partners.

You will bring 4+ years of security engineering experience, strong OWASP knowledge, and hands-on web security skills to secure Richemont’s digital ecosystem while

Formación

• 4+ years of security engineering experience in digital or e-commerce environments.
• Strong information security principles and incident response.
• Deep knowledge of OWASP Top 10 and secure coding practices.
• Experience with vulnerability scanning and penetration testing.
• Familiarity with cloud platforms and DevOps security tooling.

Responsabilidades

• Act as the primary point of contact for all IT security topics, liaising with Group Cyber Resilience, IT Security and other teams.
• Ensure Unified Commerce and Client Care solutions comply with Richemont’s security policies and standards.
• Deploy, maintain and enhance security components for protection across digital platforms.
• Plan, coordinate and follow up on security testing activities, including pen tests and scans.
• Support dev and ops teams in mitigating vulnerabilities and improving secure coding and deployment practices.
• Collaborate with DevOps and QA to enhance automated security testing in CI/CD pipelines.
• Define and enforce hardening procedures for web components and middleware.
• Participate in security audits and assessments and document security processes and incident management.
• Provide training and coaching to internal teams and partners on secure design and practices.
• Coordinate security activities across partners, agencies and Maison digital teams.
• Drive continuous improvement of Richemont’s cybersecurity posture across digital platforms.

Conocimientos

IT security principles

Web security

Penetration testing

Vulnerability scanning

OWASP Top 10

DevOps security tooling

Cloud security

Java

JavaScript

Secure coding

Herramientas

GitLab

SonarQube

Snyk

OIDC

openFGA

AWS IAM

Descripción del empleo

Digital platforms and e-commerce solutions face relentless pressure to meet global security standards while adapting to evolving threats. In Lisbon, this Security Engineer role sits at the intersection of compliance and technical resilience, where every decision shapes the protection of client care and commerce systems. You help drive secure design and implementation practices across teams and partners. The mandate extends from hardening web components to enhancing automated security testing within DevOps pipelines. The integrity of Richemont’s digital ecosystem depends on it.ResponsibilitiesAct as the primary point of contact for all IT security topics, liaising with Group Cyber Resilience, IT Security and other teamsEnsure that all Unified Commerce and Client Care solutions comply with Richemont’s global security policies and standardsDeploy, maintain and continuously enhance security components to ensure an appropriate level of protection across digital platformsPlan, coordinate and follow up on security testing activities, including penetration tests, vulnerability scans and security intelligence reviewsSupport development and operations teams in mitigating identified vulnerabilities and improving secure coding and deployment practicesCollaborate with DevOps and QA teams to define and enhance automated security testing within CI/CD pipelinesDefine and enforce hardening procedures for web-related IT components and middleware layersParticipate in security audits and assessments to ensure compliance with data protection and e-commerce requirements and develop, maintain and document security processes, controls and incident management proceduresProvide training, guidance and coaching to internal teams, Maisons and partners to promote secure design and implementation practicesCoordinate security-related activities across multiple stakeholders, including partners, agencies and Maison digital teamsContribute to continuous improvement by identifying opportunities to strengthen the overall cybersecurity posture of Richemont’s digital ecosystemRequirements4+ years of experience as a Security Engineer, preferably within digital, e-commerce or software-based environmentsStrong background in information security principles and practices, with proven experience in IT and web security across Internet, Extranet and Intranet systemsHands-on experience in web application security, including vulnerability scanning, penetration testing and incident responseSolid understanding of OWASP Top 10 and secure coding principles; able to identify and mitigate common web vulnerabilitiesFamiliarity with DevOps environments and security tooling (e.g., GitLab, SonarQube, Snyk, OIDC, openFGA and AWS IAM policies)Working knowledge of cloud platforms such as AWS, Azure or GCP, with a focus on secure architecture and deploymentPractical experience with development frameworks and languages (e.g., Java, JavaScript) and writing secure codeWe offerCompetitive compensation depending on experience and skillsVariety of projects within one companyBeing a part of a project following engineering excellence standardsIndividual career path and professional growth opportunitiesInternal events and communitiesFlexible work hours