Richemont’s digital platforms and e-commerce solutions serve client care and commerce systems.
security engineer in e-commerce
подготовься к отклику
ai-инструментыЧтобы адаптировать резюме под вакансию или составить сопроводительное письмо, загрузи резюме
описание
задачи
- Act as the primary point of contact for IT security topics, liaising with Group Cyber Resilience, IT Security and other teams
- Ensure Unified Commerce and Client Care solutions comply with global security policies and standards
- Deploy, maintain and enhance security components across digital platforms
- Plan, coordinate and follow up on penetration tests, vulnerability scans and security intelligence reviews
- Support development and operations teams in mitigating vulnerabilities and improving secure coding and deployment practices
- Collaborate with DevOps and QA teams to enhance automated security testing within CI/CD pipelines
- Define and enforce hardening procedures for web-related IT components and middleware layers
- Participate in security audits and assessments, and develop, maintain and document security processes, controls and incident management procedures
- Provide training, guidance and coaching to internal teams, Maisons and partners on secure design and implementation practices
- Coordinate security activities across partners, agencies and Maison digital teams
- Identify opportunities to strengthen the cybersecurity posture of Richemont’s digital ecosystem
требования
- 4+ Years of experience as a Security Engineer, preferably in digital, e-commerce or software environments
- Strong background in information security, with proven IT and web security experience across Internet, Extranet and Intranet systems
- Hands-on experience in web application security, vulnerability scanning, penetration testing and incident response
- Solid understanding of OWASP Top 10 and secure coding principles, including identifying and mitigating common web vulnerabilities
- Familiarity with DevOps environments and security tools such as GitLab, SonarQube, Snyk, OIDC, openFGA and AWS IAM policies
- Working knowledge of AWS, Azure or GCP, focusing on secure architecture and deployment
- Practical experience with development frameworks and languages such as Java and JavaScript, and writing secure code
условия
- Условий в вакансии нет
навыки
Глобальная компания в сфере digital engineering, product development и технологического консалтинга.
Если просят выйти из iCloud, прислать код из SMS, запустить или установить что-то, перевести деньги — не соглашайся: это мошенничество.