Security engineer in digital commerce

We are looking for a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. This role focuses on security controls, secure design, vulnerability management and the integration of security practices into Agile software delivery.

• Act as the security reference for digital product teams, coordinating security topics with cybersecurity, IT, development, operations and external partner teams.
• Support the implementation and continuous improvement of security controls across digital platforms and services.
• Ensure that digital solutions follow applicable security policies, standards and secure implementation practices.
• Plan, coordinate and follow up on security testing activities, including penetration testing, vulnerability scanning and security intelligence reviews.
• Support development and operations teams in vulnerability remediation, secure coding and secure deployment practices.
• Collaborate with DevOps and QA teams to improve automated security testing within CI/CD pipelines.
• Define, document and promote hardening procedures for web-related IT components and middleware layers.
• Participate in security audits and assessments related to data protection, e-commerce and digital platform requirements.
• Maintain security processes, controls and incident management procedures.
• Provide guidance, training and coaching to internal teams and partners to promote secure design and implementation.
• Coordinate security-related activities across multiple stakeholders and contribute to continuous cybersecurity improvement.

• At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce or software-based environments.
• Strong background in information security principles and practices, including IT and web security across Internet, Extranet and Intranet systems.
• Hands-on experience with web application security, vulnerability scanning, penetration testing and incident response.
• Solid understanding of secure coding principles and common web vulnerability mitigation.
• Ability to work independently in a fast-paced Agile and international environment.
• Strong analytical thinking, problem-solving capability and pragmatic security decision-making.
• Excellent communication skills and ability to collaborate with multinational, cross-functional teams.
• Proactive, self-driven mindset and motivation to keep learning new technologies.
• Bachelor's or Master's degree in Computer Science, Software Engineering or a related field.
• Professional working proficiency in English.
• Web application security
• Information security principles and practices
• Vulnerability scanning and penetration testing
• Incident response
• OWASP Top 10
• Secure coding principles
• Security hardening procedures
• CI/CD security testing
• GitLab, SonarQube and Snyk
• OIDC, openfGA and AWS IAM policies
• AWS, Azure or GCP
• Java and JavaScript
• Web and mobile application security
• Agile delivery practices
• Security audits and assessments
• Будет плюсом: Experience in digital commerce environments; French or another additional language; Exposure to security intelligence reviews

• Private health insurance from day one, with no waiting period and optional family extension.
• Confidential mental health support through TEAM 24, including access to psychological support, content and live sessions.
• Continuous training and certification opportunities to support structured growth and long-term capability development.
• Flexibility whenever the role and delivery context allow it, supporting sustainable performance and daily balance.
• Childcare vouchers and practical support measures designed to help balance personal and professional life.
• Community moments, shared milestones and leadership presence when it matters most.
• Opportunities to develop further capability in information security, AI governance and cybersecurity best practices.
• At Hexa, we are all Builders. We work with honesty, mutual support and agility, contributing to projects, solutions and professional relationships with responsibility and purpose. Joining Hexa means becoming part of a collaborative community where people are encouraged to grow, share knowledge and build what comes next together.