Security Engineer: E-commerce & DevSecOps (Flexible Hours)

EPAM; Lisboa; On-site; EUR 50,000 - 80,000; Full time

Benefits offered by this job

Flexible work hours

Internal events and communities

Job summary

Richemont in Lisbon is seeking a Security Engineer to bridge compliance and technical resilience across digital platforms, e-commerce and client-care systems. You will drive secure design and implementation practices, from hardening web components to automating security testing within CI/CD pipelines.

Applicants should have 4+ years in security engineering, hands-on web security, vulnerability management and cloud experience with AWS/Azure/GCP.

Qualifications

• 4+ years of experience as a Security Engineer.
• Strong knowledge of information security principles and practices and web security.

Responsibilities

• Act as primary contact for IT security topics across teams.
• Ensure Unified Commerce and Client Care solutions comply with Richemont's security policies.
• Deploy, maintain and enhance security components across digital platforms.
• Plan, coordinate security testing activities including penetration tests and vulnerability scans.
• Support dev and ops in mitigating vulnerabilities and improving secure coding and deployment practices.
• Collaborate with DevOps and QA to enhance automated security testing in CI/CD pipelines.
• Define and enforce hardening procedures for web components and middleware layers.
• Participate in security audits and document security processes and incident management.
• Provide training and coaching to internal teams and partners on secure design.
• Coordinate security activities across stakeholders including partners and Maison teams.
• Contribute to continuous improvement of Richemont's cybersecurity posture.

Skills

Web security

Penetration testing

Cloud security

DevOps security

Incident response

Education

Bachelor's or equivalent in CS/InfoSec

Tools

GitLab

SonarQube

Snyk

OIDC

openFGA

AWS IAM

Job description

Richemont in Lisbon is seeking a Security Engineer to bridge compliance and technical resilience across digital platforms, e-commerce and client-care systems. You will drive secure design and implementation practices, from hardening web components to automating security testing within CI/CD pipelines.

Applicants should have 4+ years in security engineering, hands-on web security, vulnerability management and cloud experience with AWS/Azure/GCP.