Security Engineer | BPCE-IT

Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.

As part of Groupe BPCE’s international division, Natixis in Portugal designs and delivers solutions for its two core areas - Corporate & Investment Banking and Asset & Wealth Management - as well as transversal services that support all entities across the Group.

With more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.

A disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.

We are looking for a QA Security Engineer to join the development team and strengthen the quality and security of applications throughout the software lifecycle. The ideal candidate combines experience in software testing and application security with Python automation skills, API testing expertise, and the ability to work closely with developers, architects, and stakeholders.

Responsibilities

Define and implement functional, automated, and security testing strategies for applications and services.

Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.

Develop and maintain test automation scripts and frameworks, preferably in Python.

Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.

Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.

Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.

Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.

Assess the quality, reliability, and security of integrations between applications, services, and databases.

Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.

Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

3+ years of experience in QA, test automation, application security, or roles related to software development and quality.

Proven experience creating and maintaining automated tests, with strong Python skills for scripting and automation.

Experience with functional testing, integration testing, and web application validation.

Proficiency in REST and SOAP API testing, including the use of automation and validation tools.

Knowledge of application security, including common web application and API risks, authentication, authorization, session management, and input validation.

Experience integrating tests and security controls into CI/CD pipelines.

Familiarity with SAST, DAST, dependency analysis, and API security testing tools or practices.

Knowledge of SQL and experience validating data in relational databases such as MySQL, PostgreSQL, or Oracle.

Ability to analyze results, distinguish false positives, and communicate risks clearly and with supporting evidence.

Experience with Agile methodologies and close collaboration with development teams.

Ability to design reusable tests and scalable approaches to quality and security.

Languages

Portuguese required.

English required, minimum C1 level.

Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are commit to being inclusive, caring, and fair, ensuring every voice is heard and valued.