search Browse Jobs
Security Engineer (French Speaker) | BPCE-SINatixis in Portugal · Portugal
Natixis in Portugal logo

Natixis in Portugal

company page ↗

Security Engineer (French Speaker) | BPCE-SI

🗓️ Posted 2026-10-13 Portugal Full-time Hybrid ICT
💰 Salary Not shared 📊 Market 2,800 EUR–4,200 EUR/mo

About the Company

The Natixis Center of Expertise going way beyond banking. Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide. Natixis in Portugal is part of the Global Financial Services division, where it applies technology for the development of financial expertise in its two global business lines - Corporate & Investment Banking and Asset & Wealth Management - and, transversally, for the entities of Groupe BPCE. The Centre of Expertise, currently has more than 3,000 employees from over 46 nationalities, organised in three main departments: Information Technology, Banking Support Activities and Compliance. These teams work in an integrated, inclusive and transversal way, supporting and creating value for all the business lines and platforms of the group. For recruitment: [email protected]. For other questions: [email protected]. IT Services and IT Consulting Specialties: Asset & Wealth Management, Corporate & Investment Banking, Insurance, Payments, Information Technology, Retail, Infrastructure, Production & Security, Architecture & Innovation, Risk, Compliance

Responsibilities

  • ● Company Description
  • ● Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.
  • ● As part of Groupe BPCE's international division, Natixis in Portugal designs and delivers solutions for its two core areas - Corporate & Investment Banking and Asset & Wealth Management - as well as transversal services that support all entities across the Group.
  • ● With more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.
  • ● A disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.
  • ● Job Description
  • ● Main Responsibilities:
  • ● Application Security Testing Solutions: Study, test, deploy, and maintain Application Security Testing tools and methodologies, including SAST (Static Application Security Testing), SCA (Software Composition Analysis), DAST (Dynamic Application Security Testing), and RASP (Runtime Application Self-Protection).
  • ● Security Scanning: Conduct application security scans on various business applications to identify vulnerabilities and ensure adherence to security standards.
  • ● Collaboration with DevOps: Work closely with DevOps teams and other security professionals to automate application security testing and integrate security controls into the development and release pipelines (CI/CD).
  • ● Code Security Reviews: Collaborate with developers to perform thorough security reviews of the bank's applications, providing actionable recommendations for vulnerability remediation and mitigation.
  • ● Guideline Development: Draft, update, and maintain application security guidelines to ensure secure development practices across teams.
  • ● Reporting Platform Development: Develop and maintain a platform for aggregating and reporting application security results, enabling better visibility and informed decision-making regarding security posture.
  • ● Qualifications
  • ● Hard Skills:
  • ● Minimum of 5 years in programming languages (e.g., Java, Angular, .NET, PHP, Python).
  • ● Understanding of software development best practices and awareness of source code vulnerabilities.
  • ● Familiarity with HTTP and API protocols for secure data transmission.
  • ● Basic experience with CI/CD tools, such as GIT, Jenkins, and Azure DevOps.