Security engineer in e-commerce

iTRTech Group; Lisboa; Hybrid; EUR 36,000 - 39,000; Full time

Benefits offered by this job

Hybrid work model

Onsite 2 days a week

Job summary

iTRTech Group is seeking a Security Engineer to strengthen the security of Unified Commerce and Client Care solutions in Lisbon. You will collaborate with cybersecurity, development, operations, and partner teams to ensure secure digital platforms and compliance with global security policies.

Responsibilities include leading IT security topics, deploying and improving security components, coordinating tests, and integrating automated security checks into CI/CD.

Qualifications

• 4+ years as a Security Engineer in digital, e-commerce, or software environments.
• Strong information security foundations and secure network practices.
• Hands-on experience in web app security, vulnerability scanning, penetration testing, and incident response.
• Knowledge of OWASP Top 10 and secure coding practices.
• Experience with DevOps tools and cloud security (AWS/Azure/GCP).
• Proficiency in Java and JavaScript; writing secure code.
• Bachelor’s or Master’s in CS/related field; fluent English.
• Able to work independently in an Agile environment.
• Willing to coordinate multinational teams and communicate security risks clearly.
• French or other languages are a plus.

Responsibilities

• Act as the primary contact for IT security topics, coordinating with cybersecurity teams and partners.
• Deploy, maintain, and improve security components; ensure policy compliance.
• Coordinate penetration tests, vulnerability scans, and security reviews; support remediation.
• Integrate automated security testing into CI/CD pipelines and define hardening procedures.
• Participate in security audits; document controls, processes, and incident management.
• Provide training and guidance to internal teams and partners on secure design.

Skills

Security engineering

Penetration testing

Vulnerability scanning

DevOps

OWASP Top 10

Secure coding

AWS

Azure

GCP

Java

JavaScript

Education

Bachelor or Master in CS/Software Eng

Tools

GitLab

SonarQube

Snyk

OIDC

OpenFGA

AWS IAM

Job description

Описание:

We are looking for a Security Engineer to strengthen the security of Unified Commerce and Client Care solutions. You will collaborate with cybersecurity, development, operations, and partner teams to ensure secure digital platforms and compliance with global security policies.

Задачи:

Act as the primary contact for IT security topics, coordinating with cybersecurity teams, business stakeholders, and external partners. Deploy, maintain, and improve security components, ensuring compliance with security policies and standards. Coordinate penetration tests, vulnerability scans, and security intelligence reviews; support remediation and secure coding practices. Work with DevOps and QA teams to integrate automated security testing into CI/CD pipelines and define hardening procedures for web components and middleware. Participate in security audits covering data protection and e-commerce requirements; document security controls, processes, and incident management procedures. Provide training and technical guidance to internal teams and partners, promoting secure design and continuous security improvement.

Требования:

• At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce, or software environments.
• Strong information security foundations and experience securing Internet, Extranet, and Intranet systems.
• Hands‑on experience in web application security, vulnerability scanning, penetration testing, and incident response.
• Solid understanding of OWASP Top 10, secure coding, and web and mobile application security practices.
• Familiarity with DevOps environments and tools or technologies such as GitLab, SonarQube, Snyk, OIDC, OpenFGA, and AWS IAM policies.
• Working knowledge of AWS, Azure, or GCP, focusing on secure architecture and deployment.
• Practical development experience with languages and frameworks such as Java and JavaScript, including writing secure code.
• Bachelor’s or Master’s degree in Computer Science, Software Engineering, or a related field, and fluent English.
• An analytical, proactive security professional who can work independently in a fast‑paced Agile environment.
• Comfortable coordinating multinational teams, explaining security risks clearly, and helping developers and operations teams implement practical improvements.
• Будет плюсом: French or other languages are a plus

Условия:

Hybrid — 2 days onsite per week Rate Between €3200 - 3500 RV or unipessoal (gross value)