Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 9 days ago

Security Engineer | BPCE-IT

Natixis in Portugal51 open roles

Where
Porto, Portugal
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSecurity Engineer | BPCE-ITNatixis in Portugal · Porto, Portugal

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Natixis in Portugal's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

13.6% of postings close within 7 days. Measured by our own scanner across the market. Natixis in Portugal postings stay open a median of 24 days.

Share of postings closed within
  1. 2.3%1 day
  2. 4.7%3 days
  3. 13.6%7 days
  4. 21.9%14 days
  5. 36.9%30 days
  6. 59.0%60 days
This job: posted 9 days ago

Natixis in Portugal median: 24 days open

The posting

Company Description

Natixis in Portugal is a Centre of Expertise whose mission is to transform traditional banking by developing innovative solutions for the business, operations and work culture of Groupe BPCE worldwide.

As part of Groupe BPCE’s international division, Natixis in Portugal designs and delivers solutions for its two core areas — Corporate & Investment Banking and Asset & Wealth Management — as well as transversal services that support all entities across the Group.

With more than 3,000 employees representing 46 nationalities, the teams work across Information Technology, Banking Support Activities, and Compliance, in an integrated, inclusive, and cross-functional way, supporting all business lines and platforms of the Group.

A disruptive mindset and a culture of proximity and agility identify Natixis in Portugal Team and reflect the company's mission to transform traditional banking at a global scale: a perfect match in the Portuguese dynamics and entrepreneurial ecosystem.

Job Description

We are looking for a QA Security Engineer to join the development team and strengthen the quality and security of applications throughout the software lifecycle. The ideal candidate combines experience in software testing and application security with Python automation skills, API testing expertise, and the ability to work closely with developers, architects, and stakeholders.

🎯 Responsibilities

Define and implement functional, automated, and security testing strategies for applications and services.

Integrate QA and security activities into every phase of the SDLC, from requirements analysis through to release validation.

Develop and maintain test automation scripts and frameworks, preferably in Python.

Design and execute REST and SOAP API tests, including validation of authentication, authorization, error handling, and data exposure.

Identify, document, and track application security vulnerabilities and risks, working with the relevant teams to resolve them.

Integrate and monitor security controls in CI/CD pipelines, such as static and dynamic analysis, dependency analysis, and API security checks.

Apply application security best practices and recognized frameworks, such as OWASP, when designing tests and reviewing results.

Assess the quality, reliability, and security of integrations between applications, services, and databases.

Work with developers, architects, and stakeholders to clarify requirements, acceptance criteria, and risk priorities.

Contribute to a culture of quality and security by sharing knowledge and supporting less experienced professionals.

Qualifications

3+ years of experience in QA, test automation, application security, or roles related to software development and quality.

Proven experience creating and maintaining automated tests, with strong Python skills for scripting and automation.

Experience with functional testing, integration testing, and web application validation.

Proficiency in REST and SOAP API testing, including the use of automation and validation tools.

Knowledge of application security, including common web application and API risks, authentication, authorization, session management, and input validation.

Experience integrating tests and security controls into CI/CD pipelines.

Familiarity with SAST, DAST, dependency analysis, and API security testing tools or practices.

Knowledge of SQL and experience validating data in relational databases such as MySQL, PostgreSQL, or Oracle.

Ability to analyze results, distinguish false positives, and communicate risks clearly and with supporting evidence.

Experience with Agile methodologies and close collaboration with development teams.

Ability to design reusable tests and scalable approaches to quality and security.

🌐 Languages

Portuguese required.

English required, minimum C1 level.

Additional Information

Our workplace reflects the vibrant spirit of our locations, with initiatives such as a Green Transportation Budget, electric bikes and a flexible Hybrid Work Policy. We promote wellbeing through the Honolulu Wellness Club, a Prayer Room, a Lactation Room, and themed Villages that inspire creativity and collaboration. Through our ESG and DEI strategies, we are commit to being inclusive, caring, and fair, ensuring every voice is heard and valued.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Natixis in Portugal's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Natixis in Portugal's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Natixis in Portugal's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.