Senior DevSecOps Engineer – Secure Apps (Hybrid)

Natixis in Portugal; Porto; Híbrido; EUR 60 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Hybrid work policy

Resumo da oferta

Natixis in Portugal, a Centre of Expertise, seeks a DevSecOps Engineer to enable our IT teams to build secure applications by implementing comprehensive Application Security Testing solutions and promoting best practices.

You will collaborate with DevOps to automate security controls, perform code security reviews, and shape guidelines while developing a reporting platform to visualize security posture across pipelines.

Qualificações

• Minimum of 5 years in programming and software development.
• Experience with application security testing and secure coding practices.
• Familiarity with HTTP and API protocols for secure data transmission.

Responsabilidades

• Study, test, deploy, and maintain application security testing tools (SAST/DAST/SCA/RASP).
• Conduct security scans on diverse business applications to identify vulnerabilities.
• Collaborate with DevOps to automate security testing in CI/CD pipelines.
• Perform code security reviews and provide actionable remediation recommendations.
• Draft, update and maintain application security guidelines.
• Develop and maintain a platform for reporting security results and posture.

Conhecimentos

Java

Angular

.NET

PHP

Python

Security testing

CI/CD

French language

APIs/HTTP security

GIT

Ferramentas

GIT

Jenkins

Azure DevOps

SAST tools

DAST tools

RASP tools

Descrição da oferta de emprego

Natixis in Portugal, a Centre of Expertise, seeks a DevSecOps Engineer to enable our IT teams to build secure applications by implementing comprehensive Application Security Testing solutions and promoting best practices.

You will collaborate with DevOps to automate security controls, perform code security reviews, and shape guidelines while developing a reporting platform to visualize security posture across pipelines.