Security Engineer | BPCE-IT
Natixis in Portugal6 hours ago
Porto, PortugalMid Level
Responsibilities
- Define and implement functional, automated, integration, and security testing strategies for applications and services.
- Integrate QA and security activities across the software development lifecycle from requirements analysis through release validation.
- Develop and maintain reusable test automation scripts and frameworks, preferably using Python.
- Design and execute REST and SOAP API tests covering authentication, authorization, error handling, and data exposure.
- Identify, document, track, and help remediate application security vulnerabilities and risks.
- Integrate and monitor SAST, DAST, dependency analysis, and API security controls in CI/CD pipelines.
- Validate the quality, reliability, and security of integrations between applications, services, and relational databases.
- Collaborate with developers, architects, and stakeholders on requirements, acceptance criteria, and risk priorities.
- Analyze test and security results, distinguish false positives, communicate risks with supporting evidence, and share knowledge with less experienced professionals.
Requirements
- At least 3 years of experience in QA, test automation, application security, or related software development and quality roles.
- Strong Python skills for test scripting and automation, with experience creating and maintaining automated tests.
- Experience with functional testing, integration testing, and web application validation.
- Proficiency in REST and SOAP API testing using automation and validation tools.
- Knowledge of application security risks and controls, including authentication, authorization, session management, and input validation.
- Experience integrating tests and security controls into CI/CD pipelines, with familiarity with SAST, DAST, dependency analysis, and API security testing.
- Knowledge of SQL and experience validating data in MySQL, PostgreSQL, or Oracle databases.
- Ability to design reusable tests and scalable quality and security approaches and collaborate closely with development teams.
- Experience with Agile methodologies.
- Portuguese proficiency is required, and English proficiency at a minimum C1 level is required.
Benefits
- Green Transportation Budget and electric bikes.
- Flexible hybrid work policy.
- Access to the Honolulu Wellness Club, Prayer Room, Lactation Room, and themed Villages.
- Inclusive ESG and DEI initiatives focused on wellbeing, creativity, collaboration, and belonging.
- Role based in Natixis in Portugal, a Centre of Expertise with an international and cross-functional environment.
Tech Stack
About Natixis in Portugal
Natixis in Portugal is a Centre of Expertise for Groupe BPCE, developing technology and shared services that support Corporate & Investment Banking and Asset & Wealth Management across the group. Teams in Porto and Lisbon deliver software engineering, banking operations support, and compliance services used by BPCE entities worldwide. Established in 2016, the unit operates as an internal service provider to one of France’s largest banking groups.