7 дней назад
Security Engineer | BPCE-IT
Вакансия из Hirify Global, списка международных tech-компанийДля мэтча и отклика нужен Plus
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
Текст:
TL;DR
Security Engineer | BPCE-IT (QA, Python, Application Security): Defining and implementing functional, automated, and security testing for banking applications and services with an accent on Python automation, REST and SOAP API validation, and secure SDLC integration. Focus on identifying vulnerabilities, integrating SAST/DAST and dependency controls into CI/CD pipelines, and validating authentication, authorization, and data exposure.
Location: Porto, Portugal; hybrid work
Company
in Portugal is a Centre of Expertise within Groupe BPCE, delivering technology, banking support, and compliance solutions for Corporate & Investment Banking and Asset & Wealth Management.
What you will do
- Define and implement functional, automated, and security testing strategies across the software lifecycle.
- Develop and maintain reusable test automation scripts and frameworks, preferably in Python.
- Design and execute REST and SOAP API tests covering authentication, authorization, error handling, and data exposure.
- Identify, document, and track application vulnerabilities and risks through resolution.
- Integrate and monitor SAST, DAST, dependency analysis, and API security controls in CI/CD pipelines.
- Collaborate with developers, architects, and stakeholders on requirements, acceptance criteria, risk priorities, and knowledge sharing.
Requirements
- 3+ years of experience in QA, test automation, application security, or related software development and quality roles.
- Strong Python skills for creating and maintaining automated tests.
- Experience with functional testing, integration testing, and web application validation.
- Proficiency in REST and SOAP API testing using automation and validation tools.
- Knowledge of application security risks, authentication, authorization, session management, and input validation.
- Experience integrating tests and security controls into CI/CD pipelines, including familiarity with SAST, DAST, dependency analysis, and API security practices.
- Knowledge of SQL and experience validating data in relational databases such as MySQL, PostgreSQL, or Oracle.
- Ability to analyze results, distinguish false positives, communicate risks with supporting evidence, and design scalable reusable tests.
- Experience with Agile methodologies and close collaboration with development teams.
- Portuguese required; English required at minimum C1 level.
Culture & Benefits
- Flexible hybrid work policy.
- Green Transportation Budget and electric bikes.
- Wellbeing facilities and initiatives, including the Honolulu Wellness Club, Prayer Room, and Lactation Room.
- Inclusive and collaborative environment supported by ESG and DEI strategies, themed Villages, and teams representing 46 nationalities.
Будьте осторожны
Если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого. Это мошенники. Обязательно жмите «Пожаловаться» или пишите в поддержку. Подробнее в гайде →
Похожие вакансии
Музыка
Осень
Поддержка