Security Engineer | BPCE-IT

Natixis in Portugal; Porto; Híbrido; EUR 35.000 - 55.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Hybrid work policy

Green Transportation Budget

Wellbeing initiatives

Descripción de la vacante

Natixis in Portugal is seeking a QA Security Engineer to strengthen the security and quality of applications across the software lifecycle. The role emphasizes Python automation, API testing, and secure design practices within a dynamic development team.

You will integrate QA and security into the full SDLC, develop test automation, and apply OWASP guidelines to identify and mitigate risks while collaborating with developers and stakeholders to meet acceptance criteria.

Formación

• Define and implement functional, automated, and security testing strategies.
• Integrate QA and security activities into every phase of the SDLC.
• Develop and maintain test automation scripts, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.
• Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.
• Assess the quality, reliability, and security of integrations between applications, services, and databases.
• Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.
• Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

Responsabilidades

• Define and implement functional, automated, and security testing strategies for applications and services.
• Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.
• Develop and maintain test automation scripts and frameworks, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.

Conocimientos

Python automation

API testing

REST & SOAP

CI/CD security

OWASP

Security testing

Herramientas

Python

OWASP ZAP

Postman

Jenkins

Descripción del empleo

Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.

As part of Groupe BPCE’s international division, Natixis in Portugal designs and delivers solutions for its two core areas — Corporate & Investment Banking and Asset & Wealth Management — as well as transversal services that support all entities across the Group.

With more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.

A disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.

Job Description

We are looking for a QA Security Engineer to join the development team and strengthen the quality and security of applications throughout the software lifecycle. The ideal candidate combines experience in software testing and application security with Python automation skills, API testing expertise, and the ability to work closely with developers, architects, and stakeholders.

• Define and implement functional, automated, and security testing strategies for applications and services.
• Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.
• Develop and maintain test automation scripts and frameworks, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.
• Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.
• Assess the quality, reliability, and security of integrations between applications, services, and databases.
• Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.
• Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

Languages

Additional Information

Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are commit to being inclusive, caring, and fair, ensuring every voice is heard and valued.