Security engineer

Natixis in Portugal; Lisboa; Hybrid; EUR 50,000 - 75,000; Full time

Benefits offered by this job

Green Transportation Budget

Electric bikes

Hybrid Work Policy

Honolulu Wellness Club

Prayer Room

Lactation Room

Themed Villages

Job summary

BPCE SI (Solutions Informatiques) is seeking a skilled DevSecOps Engineer to join its Security team in guiding secure application development and releases. You will implement comprehensive Application Security testing solutions and promote best practices across the organization.

You will work closely with DevOps teams to automate security testing, perform security reviews with developers, and help shape a secure digital environment for clients and stakeholders.

Qualifications

• 5+ years of programming experience in languages such as Java, Angular, .NET, PHP or Python.
• Understanding of software development best practices and awareness of secure coding.
• Familiarity with HTTP and API protocols for secure data transmission.
• Basic experience with CI/CD tools and security testing tools.
• Fluency in French (mandatory).
• English proficiency is a plus.

Responsibilities

• Study, test, deploy, and maintain Application Security Testing tools and methodologies (SAST, SCA, DAST, RASP).
• Conduct application security scans on various business applications to identify vulnerabilities and ensure standards compliance.
• Collaborate with DevOps to automate application security testing and integrate security controls into CI/CD pipelines.
• Work with developers to perform security reviews and provide actionable remediation recommendations.
• Draft, update, and maintain application security guidelines for secure development.
• Develop and maintain a platform for aggregating and reporting application security results for visibility.

Skills

Java

Angular

.NET

PHP

Python

Tools

GIT

Jenkins

Azure DevOps

Job description

Описание:

We are seeking a skilled DevSecOps Engineer to join our Security team at BPCE SI (Solutions Informatiques). In this role, you will play a critical part in enabling our IT teams to develop and release secure applications by implementing comprehensive Application Security testing solutions and promoting best practices across the organization. In this role, you will contribute to shaping a secure digital environment and protecting the interests of our clients and stakeholders.

Задачи:

• Study, test, deploy, and maintain Application Security Testing tools and methodologies, including SAST (Static Application Security Testing), SCA (Software Composition Analysis), DAST (Dynamic Application Security Testing), and RASP (Runtime Application Self-Protection).
• Conduct application security scans on various business applications to identify vulnerabilities and ensure adherence to security standards.
• Work closely with DevOps teams and other security professionals to automate application security testing and integrate security controls into the development and release pipelines (CI/CD).
• Collaborate with developers to perform thorough security reviews of the bank’s applications, providing actionable recommendations for vulnerability remediation and mitigation.
• Draft, update, and maintain application security guidelines to ensure secure development practices across teams.
• Develop and maintain a platform for aggregating and reporting application security results, enabling better visibility and informed decision-making regarding security posture.

Требования:

• Minimum of 5 years in programming languages (e.g., Java, Angular, .NET, PHP, Python).
• Understanding of software development best practices and awareness of source code vulnerabilities.
• Familiarity with HTTP and API protocols for secure data transmission.
• Basic experience with CI/CD tools, such as GIT, Jenkins, and Azure DevOps.
• Previous experience with static or dynamic security scanning tools.
• Fluency in French (mandatory).
• Strong communication skills to effectively collaborate with business units.
• Demonstrated ability to understand and prioritize user requirements effectively.
• Strong problem-solving skills for effective incident management and minimizing operational impact.
• Будет плюсом: proficiency in English (a plus)

Условия:

• Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy.
• We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration.
• Through our ESG and DEI strategies, we are commited to being inclusive, caring, and fair, ensuring every voice is heard and valued.