{"id":3448582,"url":"https://alion.io/job/natixis-security-engineer-bpce-it","title":"Security Engineer | BPCE-IT","company":{"id":3335,"name":"Natixis","domain":"natixis.com","url":"https://alion.io/company/natixis","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"SmartRecruiters","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Porto, Portugal"],"countries":["PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":29000,"max_usd":70000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":854},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agile","optional":false},{"name":"CI/CD","optional":false},{"name":"MySQL","optional":false},{"name":"OWASP","optional":false},{"name":"PostgreSQL","optional":false},{"name":"Python","optional":false},{"name":"Rest API","optional":false},{"name":"SOAP","optional":false},{"name":"SQL","optional":false}],"status":"live","first_seen_at":"2026-10-29T09:28:19Z","employer_posted_date":"2026-10-29","last_verified_at":"2026-11-01T10:54:25Z","board_verified":true,"closed_at":null,"days_open":3,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":3},"description":"Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.\nAs part of Groupe BPCE’s international division, Natixis in Portugal designs and delivers solutions for its two core areas - Corporate & Investment Banking and Asset & Wealth Management - as well as transversal services that support all entities across the Group.\nWith more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.\nA disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.\n We are looking for a QA Security Engineer to join the development team and strengthen the quality and security of applications throughout the software lifecycle. The ideal candidate combines experience in software testing and application security with Python automation skills, API testing expertise, and the ability to work closely with developers, architects, and stakeholders.\nResponsibilities\nDefine and implement functional, automated, and security testing strategies for applications and services.\nIntegrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.\nDevelop and maintain test automation scripts and frameworks, preferably in Python.\nDesign and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.\nIdentify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.\nIntegrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.\nApply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.\nAssess the quality, reliability, and security of integrations between applications, services, and databases.\nWork with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.\nContribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.\n3+ years of experience in QA, test automation, application security, or roles related to software development and quality.\nProven experience creating and maintaining automated tests, with strong Python skills for scripting and automation.\nExperience with functional testing, integration testing, and web application validation.\nProficiency in REST and SOAP API testing, including the use of automation and validation tools.\nKnowledge of application security, including common web application and API risks, authentication, authorization, session management, and input validation.\nExperience integrating tests and security controls into CI/CD pipelines.\nFamiliarity with SAST, DAST, dependency analysis, and API security testing tools or practices.\nKnowledge of SQL and experience validating data in relational databases such as MySQL, PostgreSQL, or Oracle.\nAbility to analyze results, distinguish false positives, and communicate risks clearly and with supporting evidence.\nExperience with Agile methodologies and close collaboration with development teams.\nAbility to design reusable tests and scalable approaches to quality and security.\nLanguages\nPortuguese required.\nEnglish required, minimum C1 level.\n Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are commit to being inclusive, caring, and fair, ensuring every voice is heard and valued.","description_format":"text","description_chars":4230,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"Portuguese","level":"All levels","optional":false},{"language":"English","level":"All levels","optional":false}]},"benefits":["Hybrid work"],"hiring_locations":[{"name":"Portugal","iso":"PT","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Wealth Management & Financial Advisors","Asset Management & Funds","Investment Banking & M&A Advisory"],"lifecycle":[{"event":"open","at":"2026-10-29T09:51:57Z"}],"visa":[],"liveness":{"score":90,"band":"hot","label":"Hiring now","p_open":1,"p_active":0.903,"p_room":1,"age_days":2,"expected_fill_days":52,"reasons":["conf:3","velocity","win:early"],"computed_at":"2026-11-01T06:10:25Z"},"pay":null,"html_url":"https://alion.io/job/natixis-security-engineer-bpce-it","json_url":"https://alion.io/job/natixis-security-engineer-bpce-it.json","meta":{"generated_at":"2026-11-01T12:06:28Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":18615,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-11-02T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3335},"rest":"https://alion.io/mcp/rest/get_company?id=3335"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fnatixis-security-engineer-bpce-it"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fnatixis-security-engineer-bpce-it"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fnatixis-security-engineer-bpce-it"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/natixis-security-engineer-bpce-it\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fnatixis-security-engineer-bpce-it"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3448582}},{"tool":"search_jobs","arguments":{"company":"natixis.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3448582},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}