Security Engineer

Hexa Consulting; Lisboa; Sur place; EUR 60 000 - 85 000; Plein temps

Avantages offerts par ce poste

Private health insurance

Mental health support

Training & certification opportunities

Flexible work style

Childcare vouchers

Résumé du poste

Hexa Consulting seeks an experienced Security Engineer to act as the security reference for digital product teams, coordinating topics across cybersecurity, IT, development and external partners. The role focuses on implementing and improving security controls across platforms and services.

You will lead security testing efforts, from penetration testing to vulnerability scanning, and support secure coding and deployment practices in CI/CD pipelines.

Qualifications

• Hands-on web app security and vulnerability management.
• Experience with penetration testing and incident response.
• Knowledge of secure coding and vulnerability mitigation across web platforms.
• Ability to work independently in an Agile, international environment.
• Strong communication and cross-functional collaboration skills.

Responsabilités

• Act as security reference for digital product teams.
• Coordinate security topics across cybersecurity, IT, development and partners.
• Support security controls implementation and improvement.
• Plan and coordinate security testing including pentests and scans.
• Assist in vulnerability remediation and secure deployment practices.
• Improve automated security testing in CI/CD pipelines.
• Develop hardening procedures for web components and middleware.
• Contribute to security audits and data protection assessments.
• Maintain security processes, controls and incident management.

Connaissances

Security engineering

Web security

Vulnerability scanning

Penetration testing

Incident response

Secure coding

CI/CD security testing

OIDC IAM policies

Communication

Analytical thinking

Formation

Bachelor's or Master's in CS/SE or related

Outils

GitLab

SonarQube

Snyk

Description du poste

WHAT YOU WILL DO

• Act as the security reference for digital product teams, coordinating security topics with cybersecurity, IT, development, operations and external partner teams.
• Support the implementation and continuous improvement of security controls across digital platforms and services.
• Ensure that digital solutions follow applicable security policies, standards and secure implementation practices.
• Plan, coordinate and follow up on security testing activities, including penetration testing, vulnerability scanning and security intelligence reviews.
• Support development and operations teams in vulnerability remediation, secure coding and secure deployment practices.
• Collaborate with DevOps and QA teams to improve automated security testing within CI/CD pipelines.
• Define, document and promote hardening procedures for web-related IT components and middleware layers.
• Participate in security audits and assessments related to data protection, e-commerce and digital platform requirements.
• Maintain security processes, controls and incident management procedures.
• Provide guidance, training and coaching to internal teams and partners to promote secure design and implementation.
• Coordinate security-related activities across multiple stakeholders and contribute to continuous cybersecurity improvement.

WHAT WE ARE LOOKING FOR

• At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce or software-based environments.
• Strong background in information security principles and practices, including IT and web security across Internet, Extranet and Intranet systems.
• Hands-on experience with web application security, vulnerability scanning, penetration testing and incident response.
• Solid understanding of secure coding principles and common web vulnerability mitigation.
• Ability to work independently in a fast-paced Agile and international environment.
• Strong analytical thinking, problem-solving capability and pragmatic security decision-making.
• Excellent communication skills and ability to collaborate with multinational, cross-functional teams.
• Proactive, self-driven mindset and motivation to keep learning new technologies.
• Bachelor's or Master's degree in Computer Science, Software Engineering or a related field.
• Professional working proficiency in English.

TECHNICAL SKILLS

• Web application security
• Information security principles and practices
• Vulnerability scanning and penetration testing
• OWASP Top 10
• Security hardening procedures
• CI/CD security testing
• GitLab, SonarQube and Snyk
• OIDC, openFGA and AWS IAM policies
• Web and mobile application security
• Security audits and assessments

NICE TO HAVE

• Experience in digital commerce environments
• French or another additional language
• Exposure to security intelligence reviews

WHAT WE OFFER

• Private health insurance from day one, with no waiting period and optional family extension.
• Confidential mental health support through TEAM 24, including access to psychological support, content and live sessions.
• Continuous training and certification opportunities to support structured growth and long-term capability development.
• Flexibility whenever the role and delivery context allow it, supporting sustainable performance and daily balance.
• Childcare vouchers and practical support measures designed to help balance personal and professional life.
• Community moments, shared milestones and leadership presence when it matters most.
• Opportunities to develop further capability in information security, AI governance and cybersecurity best practices.

EQUAL OPPORTUNITY

Hexa is committed to equal opportunity and inclusive recruitment. We value different backgrounds, perspectives and experiences, and we align our practices with the principles of the Portuguese Diversity Charter.

HEXA LIFE

At Hexa, we are all Builders. We work with honesty, mutual support and agility, contributing to projects, solutions and professional relationships with responsibility and purpose. Joining Hexa means becoming part of a collaborative community where people are encouraged to grow, share knowledge and build what comes next together.