Security Engineer

EPAM Systems; Portugal; On-site; EUR 60,000 - 90,000; Full time

Job summary

Richemont in Lisbon seeks a Security Engineer to bridge compliance and technical resilience across digital platforms. You will drive secure design and implement controls, from web component hardening to automated security testing within DevOps pipelines.

You will collaborate with IT, DevOps, QA and Maison teams to enforce policies, conduct vulnerability assessments and mentor on secure coding and incident response to protect client care and commerce systems.

Qualifications

• 4+ years of experience as a Security Engineer in digital, e-commerce or software environments.
• Strong background in information security principles and practices across IT and web security.
• Hands-on experience in web application security including vulnerability scanning, pentesting and incident response.
• Familiarity with OWASP Top 10 and secure coding principles.
• Able to identify and mitigate common web vulnerabilities.
• Working knowledge of cloud platforms (AWS, Azure, GCP) with secure architecture focus.
• Experience with development frameworks and languages (Java, JavaScript) and secure coding.

Responsibilities

• Act as the primary point of contact for IT security topics across teams.
• Ensure compliance with Richemont’s global security policies and standards.
• Deploy, maintain and enhance security components across digital platforms.
• Plan and coordinate security testing activities including penetration tests and vulnerability scans.
• Support DevOps and operations in mitigating vulnerabilities and improving secure deployment.
• Collaborate with DevOps and QA to enhance automated security testing in CI/CD.
• Define and enforce hardening procedures for web components and middleware.
• Participate in security audits and document security processes and incident management.
• Provide training and coaching on secure design and implementation.

Skills

IT security principles

Secure coding

Security testing

Vulnerability analysis

Incident response

Tools

GitLab

SonarQube

Snyk

OIDC

openFGA

AWS IAM policies

AWS

Azure

GCP

Java

JavaScript

Job description

Digital platforms and e-commerce solutions face relentless pressure to meet global security standards while adapting to evolving threats. In Lisbon, this Security Engineer role sits at the intersection of compliance and technical resilience, where every decision shapes the protection of client care and commerce systems. You help drive secure design and implementation practices across teams and partners. The mandate extends from hardening web components to enhancing automated security testing within DevOps pipelines. The integrity of Richemont’s digital ecosystem depends on it.

Responsibilities

• Act as the primary point of contact for all IT security topics, liaising with Group Cyber Resilience, IT Security and other teams
• Ensure that all Unified Commerce and Client Care solutions comply with Richemont’s global security policies and standards
• Deploy, maintain and continuously enhance security components to ensure an appropriate level of protection across digital platforms
• Plan, coordinate and follow up on security testing activities, including penetration tests, vulnerability scans and security intelligence reviews
• Support development and operations teams in mitigating identified vulnerabilities and improving secure coding and deployment practices
• Collaborate with DevOps and QA teams to define and enhance automated security testing within CI/CD pipelines
• Define and enforce hardening procedures for web-related IT components and middleware layers
• Participate in security audits and assessments to ensure compliance with data protection and e-commerce requirements and develop, maintain and document security processes, controls and incident management procedures
• Provide training, guidance and coaching to internal teams, Maisons and partners to promote secure design and implementation practices
• Coordinate security-related activities across multiple stakeholders, including partners, agencies and Maison digital teams
• Contribute to continuous improvement by identifying opportunities to strengthen the overall cybersecurity posture of Richemont’s digital ecosystem

Requirements

• 4+ years of experience as a Security Engineer, preferably within digital, e-commerce or software-based environments
• Strong background in information security principles and practices, with proven experience in IT and web security across Internet, Extranet and Intranet systems
• Hands-on experience in web application security, including vulnerability scanning, penetration testing and incident response
• Solid understanding of OWASP Top 10 and secure coding principles; able to identify and mitigate common web vulnerabilities
• Familiarity with DevOps environments and security tooling (e.g., GitLab, SonarQube, Snyk, OIDC, openFGA and AWS IAM policies)
• Working knowledge of cloud platforms such as AWS, Azure or GCP, with a focus on secure architecture and deployment
• Practical experience with development frameworks and languages (e.g., Java, JavaScript) and writing secure code