Security Engineer — Flexible Hours, Growth & Impact

EPAM Systems; Lisboa; On-site; EUR 50,000 - 80,000; Full time

Job summary

Richemont in Lisbon seeks a Security Engineer to bridge compliance and technical resilience across Unified Commerce and Client Care platforms. You will drive secure design, implement automated security testing in DevOps, harden web components, and coordinate audits, training and incident management with multiple teams and partners.

You will bring 4+ years of security engineering experience, strong OWASP knowledge, and hands-on web security skills to secure Richemont’s digital ecosystem while

Qualifications

• 4+ years of security engineering experience in digital or e-commerce environments.
• Strong information security principles and incident response.
• Deep knowledge of OWASP Top 10 and secure coding practices.
• Experience with vulnerability scanning and penetration testing.
• Familiarity with cloud platforms and DevOps security tooling.

Responsibilities

• Act as the primary point of contact for all IT security topics, liaising with Group Cyber Resilience, IT Security and other teams.
• Ensure Unified Commerce and Client Care solutions comply with Richemont’s security policies and standards.
• Deploy, maintain and enhance security components for protection across digital platforms.
• Plan, coordinate and follow up on security testing activities, including pen tests and scans.
• Support dev and ops teams in mitigating vulnerabilities and improving secure coding and deployment practices.
• Collaborate with DevOps and QA to enhance automated security testing in CI/CD pipelines.
• Define and enforce hardening procedures for web components and middleware.
• Participate in security audits and assessments and document security processes and incident management.
• Provide training and coaching to internal teams and partners on secure design and practices.
• Coordinate security activities across partners, agencies and Maison digital teams.
• Drive continuous improvement of Richemont’s cybersecurity posture across digital platforms.

Skills

IT security principles

Web security

Penetration testing

Vulnerability scanning

OWASP Top 10

DevOps security tooling

Cloud security

Java

JavaScript

Secure coding

Tools

GitLab

SonarQube

Snyk

OIDC

openFGA

AWS IAM

Job description

Richemont in Lisbon seeks a Security Engineer to bridge compliance and technical resilience across Unified Commerce and Client Care platforms. You will drive secure design, implement automated security testing in DevOps, harden web components, and coordinate audits, training and incident management with multiple teams and partners.

You will bring 4+ years of security engineering experience, strong OWASP knowledge, and hands-on web security skills to secure Richemont’s digital ecosystem while