Security engineer for e-commerce platforms

EPAM; Lisboa; Sur place; EUR 50 000 - 80 000; Plein temps

Avantages offerts par ce poste

Flexible work hours

Internal events and communities

Résumé du poste

Richemont in Lisbon is seeking a Security Engineer to bridge compliance and technical resilience across digital platforms, e-commerce and client-care systems. You will drive secure design and implementation practices, from hardening web components to automating security testing within CI/CD pipelines.

Applicants should have 4+ years in security engineering, hands-on web security, vulnerability management and cloud experience with AWS/Azure/GCP.

Qualifications

• 4+ years of experience as a Security Engineer.
• Strong knowledge of information security principles and practices and web security.

Responsabilités

• Act as primary contact for IT security topics across teams.
• Ensure Unified Commerce and Client Care solutions comply with Richemont's security policies.
• Deploy, maintain and enhance security components across digital platforms.
• Plan, coordinate security testing activities including penetration tests and vulnerability scans.
• Support dev and ops in mitigating vulnerabilities and improving secure coding and deployment practices.
• Collaborate with DevOps and QA to enhance automated security testing in CI/CD pipelines.
• Define and enforce hardening procedures for web components and middleware layers.
• Participate in security audits and document security processes and incident management.
• Provide training and coaching to internal teams and partners on secure design.
• Coordinate security activities across stakeholders including partners and Maison teams.
• Contribute to continuous improvement of Richemont's cybersecurity posture.

Connaissances

Web security

Penetration testing

Cloud security

DevOps security

Incident response

Formation

Bachelor's or equivalent in CS/InfoSec

Outils

GitLab

SonarQube

Snyk

OIDC

openFGA

AWS IAM

Description du poste

Digital platforms and e-commerce solutions face relentless pressure to meet global security standards while adapting to evolving threats. In Lisbon, this Security Engineer role sits at the intersection of compliance and technical resilience, where every decision shapes the protection of client care and commerce systems. You help drive secure design and implementation practices across teams and partners. The mandate extends from hardening web components to enhancing automated security testing within DevOps pipelines. The integrity of Richemont’s digital ecosystem depends on it.

Задачи:

• Act as the primary point of contact for all IT security topics, liaising with Group Cyber Resilience, IT Security and other teams
• Ensure that all Unified Commerce and Client Care solutions comply with Richemont’s global security policies and standards
• Deploy, maintain and continuously enhance security components to ensure an appropriate level of protection across digital platforms
• Plan, coordinate and follow up on security testing activities, including penetration tests, vulnerability scans and security intelligence reviews
• Support development and operations teams in mitigating identified vulnerabilities and improving secure coding and deployment practices
• Collaborate with DevOps and QA teams to define and enhance automated security testing within CI/CD pipelines
• Define and enforce hardening procedures for web-related IT components and middleware layers
• Participate in security audits and assessments to ensure compliance with data protection and e-commerce requirements and develop, maintain and document security processes, controls and incident management procedures
• Provide training, guidance and coaching to internal teams, Maisons and partners to promote secure design and implementation practices
• Coordinate security-related activities across multiple stakeholders, including partners, agencies and Maison digital teams
• Contribute to continuous improvement by identifying opportunities to strengthen the overall cybersecurity posture of Richemont’s digital ecosystem

Требования:

• 4+ years of experience as a Security Engineer, preferably within digital, e-commerce or software-based environments
• Strong background in information security principles and practices, with proven experience in IT and web security across Internet, Extranet and Intranet systems
• Hands-on experience in web application security, including vulnerability scanning, penetration testing and incident response
• Solid understanding of OWASP Top 10 and secure coding principles; able to identify and mitigate common web vulnerabilities
• Familiarity with DevOps environments and security tooling (e.g., GitLab, SonarQube, Snyk, OIDC, openFGA and AWS IAM policies)
• Working knowledge of cloud platforms such as AWS, Azure or GCP, with a focus on secure architecture and deployment
• Practical experience with development frameworks and languages (e.g., Java, JavaScript) and writing secure code

Условия:

• Competitive compensation depending on experience and skills
• Variety of projects within one company
• Being a part of a project following engineering excellence standards
• Individual career path and professional growth opportunities
• Internal events and communities
• Flexible work hours