Security Engineer: Web Security & DevSecOps (Agile)

Hexa Group; Lisboa; Hybrid; EUR 55,000 - 75,000; Full time

Benefits offered by this job

Health insurance

Mental health support

Training opportunities

Flexible work

Childcare vouchers

Community events

Career development

Job summary

Hexa Group is seeking a Security Engineer to strengthen cybersecurity across luxury digital commerce platforms. You will act as the security reference for product teams, coordinate across cybersecurity, IT, development and external partners, and lead security testing activities including penetration tests and vulnerability scans.

You will support secure coding, remediation and deployment practices, collaborate with DevOps and QA to improve automated security testing in CI/CD, and help establish

Qualifications

• 4+ years of experience in Security Engineering or similar
• Strong information security principles across web/internet/extranet/intranet
• Hands-on with web app security, vulnerability scanning and incident response
• Able to work independently in an fast-paced Agile/international environment
• Excellent communication and collaboration with cross-functional teams
• Proactive learner with motivation to keep up with new tech

Responsibilities

• Act as security reference for digital product teams and coordinate topics with cybersecurity, IT, development, operations and partners
• Support implementation and continuous improvement of security controls across digital platforms
• Ensure digital solutions follow security policies and secure practices
• Plan and coordinate security testing activities including pen tests and vulnerability scans
• Support remediation, secure coding and secure deployment practices
• Collaborate with DevOps and QA to improve automated security testing in CI/CD
• Document and promote hardening procedures for web components and middleware
• Participate in security audits and data protection assessments
• Maintain security processes, controls and incident management
• Provide training and guidance to internal teams and partners on secure design

Skills

Security engineering

Web application security

Penetration testing

Vulnerability management

Secure coding practices

Agile / DevOps collaboration

English proficiency

Education

Bachelor's or Master's in Computer Science / Software Engineering

Tools

Burp Suite

OWASP ZAP

CI/CD tooling

Job description

Hexa Group is seeking a Security Engineer to strengthen cybersecurity across luxury digital commerce platforms. You will act as the security reference for product teams, coordinate across cybersecurity, IT, development and external partners, and lead security testing activities including penetration tests and vulnerability scans.

You will support secure coding, remediation and deployment practices, collaborate with DevOps and QA to improve automated security testing in CI/CD, and help establish