Senior Security Engineer

Hexa Consulting; Lisboa; Hybrid; EUR 70,000 - 90,000; Full time

Benefits offered by this job

Private health insurance from day one

Hybrid work model

Learning & certification support

Mental health support

Childcare vouchers

Career growth exposure

Job summary

Hexa Consulting is seeking a Senior Security Engineer to join the Client's team in Lisbon in a hybrid work model. You will coordinate cross-functional cybersecurity initiatives and strengthen security across digital platforms and services.

You will drive vulnerability management, secure deployments and secure coding practices within Agile and CI/CD contexts, collaborating with development, operations and external partners. Proactive learning and strong English communication are essential.

Qualifications

• Bachelor's or Master's degree in Computer Science, Software Engineering or related field.
• Strong knowledge of information security principles, IT security and web app security across networks.
• Hands-on with vulnerability scanning, pentesting, security controls and incident response.
• Solid understanding of OWASP Top 10 and secure coding principles.
• Experience supporting security hardening and secure deployment practices.
• Understanding security in Agile and CI/CD environments.
• Excellent communication and ability to coordinate with multinational teams.

Responsibilities

• Act as security reference for digital product teams and coordinate cybersecurity initiatives.
• Support implementation and continuous improvement of security controls across platforms.
• Ensure solutions comply with security policies and design principles.
• Plan and follow up on security testing activities including pentesting and scanning.
• Collaborate with development and operations to remediate vulnerabilities.
• Promote secure coding and deployment practices throughout SDLC.
• Work with DevOps and QA to strengthen automated security testing in CI/CD.
• Define and promote security hardening for web infrastructure and apps.
• Participate in security audits covering data protection and e-commerce.
• Maintain security processes and incident management practices.
• Provide guidance and training on security best practices.

Skills

Security engineering

Vulnerability assessment

Penetration testing

CI/CD security

DevSecOps

OWASP Top 10

Security incident response

Cross-functional communication

English proficiency

Education

Bachelor's or Master's in CS

Tools

GitLab

SonarQube

Snyk

CI/CD tooling

Job description

Hexa Consulting is looking for a Senior Security Engineer to join our Client's team in a hybrid work model from Lisbon.

JOB DETAILS

Lisbon, Portugal | Hybrid | Luxury Goods & Digital Commerce Sector

MANDATORY REQUIREMENTS

• At least 4 years of professional experience as a Security Engineer, ideally in digital platforms, e-commerce or software-driven environments.
• Bachelor's or Master's degree in Computer Science, Software Engineering or a related field.
• Strong knowledge of information security principles, IT security and web application security across Internet, Extranet and Intranet environments.
• Hands-on experience with vulnerability scanning, penetration testing, security controls and incident response.
• Solid understanding of OWASP Top 10, secure coding principles and common web application vulnerabilities.
• Experience supporting security hardening, vulnerability remediation and secure deployment practices.
• Understanding of security integration into Agile software development and CI/CD processes.
• Strong analytical and problem-solving skills, with the ability to make pragmatic security decisions.
• Ability to work independently and coordinate security activities across development, operations, cybersecurity and external partner teams.
• Excellent communication skills and experience collaborating with multinational, cross-functional teams.
• Proactive, self-driven mindset and willingness to continuously learn and improve.
• Professional working proficiency in English.

NICE TO HAVE

• Previous experience in digital commerce or e-commerce environments.
• Exposure to security intelligence reviews and related assessment activities.

TECHNOLOGY STACK

• Application Security: Web & Mobile Application Security, OWASP Top 10, Secure Coding.
• Security Testing: Vulnerability Scanning, Penetration Testing, Security Assessments.
• DevSecOps: GitLab, SonarQube, Snyk, CI/CD Security Testing.
• Identity & Access Management: OIDC, OpenFGA, AWS IAM Policies.
• Cloud Platforms: AWS, Azure, GCP.
• Programming: Java, JavaScript.
• Security Operations: Incident Response, Security Hardening, Vulnerability Management.
• Methodologies: Agile Delivery, Secure Software Development Practices.

KEY RESPONSIBILITIES

• Act as the security reference for digital product teams, coordinating cybersecurity initiatives with IT, development, operations and external partners.
• Support the implementation, maintenance and continuous improvement of security controls across digital platforms and services.
• Ensure digital solutions comply with applicable security policies, standards and secure design principles.
• Plan, coordinate and follow up on security testing activities, including penetration testing, vulnerability scanning and security intelligence reviews.
• Collaborate with development and operations teams to identify, prioritize and remediate security vulnerabilities.
• Promote secure coding, secure design and secure deployment practices throughout the software development lifecycle.
• Work closely with DevOps and QA teams to strengthen automated security testing within CI/CD pipelines.
• Define, document and promote security hardening procedures for web infrastructure, applications and middleware components.
• Participate in security audits and assessments covering data protection, e-commerce and digital platform security requirements.
• Maintain and improve security processes, technical controls and incident management procedures.
• Provide technical guidance, training and coaching to internal teams and external partners on security best practices.
• Coordinate security-related activities across multiple stakeholders and contribute to continuous cybersecurity improvement.

WHAT WE OFFER

• Work Model: Hybrid.
• A culture where each person is encouraged to act as a Builder, contributing with ownership, responsibility and impact.
• A collaborative environment built on Honesty, Mutual Support and Agility.
• Continuous learning and certification support throughout your journey.
• Private health insurance from day one, with optional family extension.
• Confidential mental health support through TEAM 24, including psychological support, content and live sessions.
• Childcare vouchers and practical family support measures.
• Opportunities to grow through exposure to quality management, information security, AI governance and cybersecurity best practices.

EQUAL OPPORTUNITY

Hexa is committed to equal opportunity, inclusion and fair access to professional growth. We value diverse backgrounds, perspectives and experiences, and we support the principles of the Portuguese Diversity Charter in the way we build teams and opportunities.

HEXA LIFE

Life at Hexa means being part of a community of Builders. We work with transparency, support each other across projects and geographies, and stay focused on learning, adapting and delivering work that creates real impact.