security engineer in fintech

Natixis in Portugal is a Centre of Expertise that transforms traditional banking by developing innovative solutions for Groupe BPCE’s business, operations, work culture, Corporate & Investment Banking, Asset & Wealth Management, and transversal services worldwide.

• Study, test, deploy, and maintain Application Security Testing tools and methodologies, including SAST, SCA, DAST, and RASP;
• Conduct application security scans on business applications to identify vulnerabilities and ensure adherence to security standards;
• Collaborate with DevOps teams and security professionals to automate application security testing and integrate security controls into CI/CD pipelines;
• Perform security reviews of the bank’s applications with developers and provide recommendations for vulnerability remediation and mitigation;
• Draft, update, and maintain application security guidelines;
• Develop and maintain a platform for aggregating and reporting application security results.

• At least 5 years of experience with programming languages such as Java, Angular, .NET, PHP, or Python;
• Understanding of software development best practices and source code vulnerabilities;
• Familiarity with HTTP and API protocols for secure data transmission;
• Basic experience with CI/CD tools such as GIT, Jenkins, and Azure DevOps;
• Previous experience with static or dynamic security scanning tools;
• Fluent French;
• Strong communication skills for collaboration with business units;
• Ability to understand and prioritize user requirements;
• Strong problem-solving skills for incident management and minimizing operational impact;
• CV must be in English;
• Nice to have: English proficiency.

• Hybrid Work Policy;
• Green Transportation Budget;
• Electric bikes;
• Honolulu Wellness Club;
• Prayer Room;
• Lactation Room;
• Themed Villages.