Security Engineer | BPCE-IT

Natixis; Porto; Híbrido; EUR 45.000 - 65.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

a Green Transportation Budget

electric bikes

a flexible Hybrid Work Policy

Honolulu Wellness Club

Prayer Room

Lactation Room

themed Villages

Descripción de la vacante

Natixis in Portugal, a Centre of Expertise within Groupe BPCE, is seeking a QA Security Engineer to strengthen the quality and security of its applications throughout the software lifecycle. You will apply Python automation, API testing, and security best practices in a collaborative environment.

You will define testing strategies, integrate security into the SDLC, and work closely with developers and architects to identify vulnerabilities, validate controls, and improve overall risk management

Formación

• 3+ years in QA, test automation, or app security.
• Strong Python scripting skills for automation.
• Experience with REST and SOAP API testing.
• Knowledge of web app and API security risks.
• Experience integrating tests into CI/CD pipelines.

Responsabilidades

• Define and implement functional, automated, and security testing strategies for applications and services.
• Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.
• Develop and maintain test automation scripts and frameworks, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.
• Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.
• Assess the quality, reliability, and security of integrations between applications, services, and databases.
• Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.
• Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

Conocimientos

Python scripting

Test automation

API testing

Application security

CI/CD security

OWASP

Agile

SQL validation

Data analysis

Herramientas

SAST tools

DAST tools

REST API testing tools

MySQL

PostgreSQL

Oracle

Descripción del empleo

Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.
As part of Groupe BPCE’s international division, Natixis in Portugal designs and delivers solutions for its two core areas — Corporate & Investment Banking and Asset & Wealth Management — as well as transversal services that support all entities across the Group.
With more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.
A disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.

Job Description

We are looking for a QA Security Engineer to join the development team and strengthen the quality and security of applications throughout the software lifecycle. The ideal candidate combines experience in software testing and application security with Python automation skills, API testing expertise, and the ability to work closely with developers, architects, and stakeholders.

• Define and implement functional, automated, and security testing strategies for applications and services.
• Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.
• Develop and maintain test automation scripts and frameworks, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.
• Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.
• Assess the quality, reliability, and security of integrations between applications, services, and databases.
• Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.
• Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

Qualifications

• 3+ years of experience in QA, test automation, application security, or roles related to software development and quality.
• Proven experience creating and maintaining automated tests, with strong Python skills for scripting and automation.
• Experience with functional testing, integration testing, and web application validation.
• Proficiency in REST and SOAP API testing, including the use of automation and validation tools.
• Knowledge of application security, including common web application and API risks, authentication, authorization, session management, and input validation.
• Experience integrating tests and security controls into CI/CD pipelines.
• Familiarity with SAST, DAST, dependency analysis, and API security testing tools or practices.
• Knowledge of SQL and experience validating data in relational databases such as MySQL, PostgreSQL, or Oracle.
• Ability to analyze results, distinguish false positives, and communicate risks clearly and with supporting evidence.
• Experience with Agile methodologies and close collaboration with development teams.
• Ability to design reusable tests and scalable approaches to quality and security.
• Languages

Additional Information

Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are commit to being inclusive, caring, and fair, ensuring every voice is heard and valued.

• a Green Transportation Budget
• electric bikes
• a flexible Hybrid Work Policy
• the Honolulu Wellness Club
• a Prayer Room
• a Lactation Room
• themed Villages