Security QA Engineer | Python Automation & API Testing

Natixis in Portugal; Porto; Híbrido; EUR 35 000 - 55 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work policy

Green Transportation Budget

Wellbeing initiatives

Resumo da oferta

Natixis in Portugal is seeking a QA Security Engineer to strengthen the security and quality of applications across the software lifecycle. The role emphasizes Python automation, API testing, and secure design practices within a dynamic development team.

You will integrate QA and security into the full SDLC, develop test automation, and apply OWASP guidelines to identify and mitigate risks while collaborating with developers and stakeholders to meet acceptance criteria.

Qualificações

• Define and implement functional, automated, and security testing strategies.
• Integrate QA and security activities into every phase of the SDLC.
• Develop and maintain test automation scripts, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.
• Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.
• Assess the quality, reliability, and security of integrations between applications, services, and databases.
• Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.
• Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

Responsabilidades

• Define and implement functional, automated, and security testing strategies for applications and services.
• Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.
• Develop and maintain test automation scripts and frameworks, preferably in Python.
• Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.
• Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.
• Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.

Conhecimentos

Python automation

API testing

REST & SOAP

CI/CD security

OWASP

Security testing

Ferramentas

Python

OWASP ZAP

Postman

Jenkins

Descrição da oferta de emprego

Natixis in Portugal is seeking a QA Security Engineer to strengthen the security and quality of applications across the software lifecycle. The role emphasizes Python automation, API testing, and secure design practices within a dynamic development team.

You will integrate QA and security into the full SDLC, develop test automation, and apply OWASP guidelines to identify and mitigate risks while collaborating with developers and stakeholders to meet acceptance criteria.