Application security engineer in digital commerce

Описание:

We are looking for a Security Engineer to strengthen the cybersecurity posture of digital commerce and client-facing platforms in the luxury goods sector. This role focuses on security controls, secure design, vulnerability management and the integration of security practices into Agile software delivery.

Задачи:

• Act as the security reference for digital product teams, coordinating security topics with cybersecurity, IT, development, operations and external partner teams.
• Support the implementation and continuous improvement of security controls across digital platforms and services.
• Ensure that digital solutions follow applicable security policies, standards and secure implementation practices.
• Plan, coordinate and follow up on security testing activities, including penetration testing, vulnerability scanning and security intelligence reviews.
• Support development and operations teams in vulnerability remediation, secure coding and secure deployment practices.
• Collaborate with DevOps and QA teams to improve automated security testing within CI/CD pipelines.
• Define, document and promote hardening procedures for web-related IT components and middleware layers.
• Participate in security audits and assessments related to data protection, e-commerce and digital platform requirements.
• Maintain security processes, controls and incident management procedures.
• Provide guidance, training and coaching to internal teams and partners to promote secure design and implementation.
• Coordinate security-related activities across multiple stakeholders and contribute to continuous cybersecurity improvement.

Требования:

At least 4 years of experience as a Security Engineer, preferably in digital, e-commerce or software-based environments.

Strong background in information security principles and practices, including IT and web security across Internet, Extranet and Intranet systems.

Hands-on experience with web application security, vulnerability scanning, penetration testing and incident response.

Solid understanding of secure coding principles and common web vulnerability mitigation.

Ability to work independently in a fast-paced Agile and international environment.

Strong analytical thinking, problem-solving capability and pragmatic security decision-making.

Excellent communication skills and ability to collaborate with multinational, cross-functional teams.

Proactive, self-driven mindset and motivation to keep learning new technologies.

Bachelor's or Master's degree in Computer Science, Software Engineering or a related field.

Professional working proficiency in English.

• Web application security
• Information security principles and practices
• Vulnerability scanning and penetration testing
• Incident response
• OWASP Top 10
• Secure coding principles
• Security hardening procedures
• CI/CD security testing
• GitLab, SonarQube and Snyk
• OIDC, openFGA and AWS IAM policies
• AWS, Azure or GCP
• Java and JavaScript
• Web and mobile application security
• Agile delivery practices
• Security audits and assessments

Будет плюсом:

• Experience in digital commerce environments
• French or another additional language
• Exposure to security intelligence reviews

Условия:

• Private health insurance from day one, with no waiting period and optional family extension.
• Confidential mental health support through TEAM 24, including access to psychological support, content and live sessions.
• Continuous training and certification opportunities to support structured growth and long-term capability development.
• Flexibility whenever the role and delivery context allow it, supporting sustainable performance and daily balance.
• Childcare vouchers and practical support measures designed to help balance personal and professional life.
• Community moments, shared milestones and leadership presence when it matters most.
• Opportunities to develop further capability in information security, AI governance and cybersecurity best practices.