Security Engineer — Secure Web & CI/CD for Digital Commerce

Hexa Consulting; Lisboa; On-site; EUR 50,000 - 65,000; Full time

Benefits offered by this job

Private health insurance

Mental health support

Training and certification

Flexible work arrangement

Childcare support

Community and leadership events

Career development in InfoSec

Job summary

Hexa Consulting is seeking a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. You will focus on security controls, secure design, vulnerability management and integrating security into Agile software delivery.

You will act as the security reference for product teams, coordinate with cybersecurity, IT, development, and external partners, and drive continuous security improvements across platforms and services.

Qualifications

• At least 4 years of experience in security engineering for digital, e-commerce or software environments.
• Strong understanding of information security principles and web security across Internet, Extranet and Intranet.
• Hands-on experience with web application security, vulnerability scanning, penetration testing and incident response.
• Solid understanding of secure coding principles and mitigations for common web vulnerabilities.
• Ability to work independently in a fast-paced Agile and international environment.
• Excellent communication and collaboration with multinational teams.
• Proactive attitude and willingness to learn new technologies.

Responsibilities

• Act as security reference for digital product teams, coordinating topics with cybersecurity, IT, development, operations and external partners.
• Support implementation and continuous improvement of security controls across digital platforms and services.
• Ensure digital solutions follow security policies, standards and secure implementation practices.
• Plan and coordinate security testing activities including pentests and vulnerability scans.
• Assist DevOps and QA to improve automated security testing in CI/CD pipelines.
• Define and promote hardening procedures for web components and middleware.
• Participate in security audits and data protection/compliance assessments.
• Maintain security processes, controls and incident management procedures.
• Provide guidance and coaching to internal teams and partners on secure design and implementation.
• Coordinate security activities across stakeholders for continuous cybersecurity improvement.

Skills

Web application security

Information security principles and PR

Vulnerability scanning and penetration

Incident response

OWASP Top 10

Secure coding principles

Security hardening procedures

CI/CD security testing

GitLab, SonarQube and Snyk

OIDC, OpenID policies

AWS, Azure or GCP

Java and JavaScript

Web and mobile application security

Agile delivery practices

Security audits and assessments

Education

Bachelor's or Master's degree in Computer Science, Software Engineering or a related field

Job description

Hexa Consulting is seeking a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. You will focus on security controls, secure design, vulnerability management and integrating security into Agile software delivery.

You will act as the security reference for product teams, coordinate with cybersecurity, IT, development, and external partners, and drive continuous security improvements across platforms and services.