Security Engineer

Digital platforms and e-commerce solutions face relentless pressure to meet global security standards while adapting to evolving threats. In Lisbon, this Security Engineer role sits at the intersection of compliance and technical resilience, where every decision shapes the protection of client care and commerce systems. You help drive secure design and implementation practices across teams and partners. The mandate extends from hardening web components to enhancing automated security testing within DevOps pipelines. The integrity of Richemont’s digital ecosystem depends on it.

Responsibilities

• Act as the primary point of contact for all IT security topics, liaising with Group Cyber Resilience, IT Security and other teams
• Ensure that all Unified Commerce and Client Care solutions comply with Richemont’s global security policies and standards
• Deploy, maintain and continuously enhance security components to ensure an appropriate level of protection across digital platforms
• Plan, coordinate and follow up on security testing activities, including penetration tests, vulnerability scans and security intelligence reviews
• Support development and operations teams in mitigating identified vulnerabilities and improving secure coding and deployment practices
• Collaborate with DevOps and QA teams to define and enhance automated security testing within CI/CD pipelines
• Define and enforce hardening procedures for web-related IT components and middleware layers
• Participate in security audits and assessments to ensure compliance with data protection and e-commerce requirements and develop, maintain and document security processes, controls and incident management procedures
• Provide training, guidance and coaching to internal teams, Maisons and partners to promote secure design and implementation practices
• Coordinate security-related activities across multiple stakeholders, including partners, agencies and Maison digital teams
• Contribute to continuous improvement by identifying opportunities to strengthen the overall cybersecurity posture of Richemont’s digital ecosystem

Requirements

• 4+ years of experience as a Security Engineer, preferably within digital, e-commerce or software-based environments
• Strong background in information security principles and practices, with proven experience in IT and web security across Internet, Extranet and Intranet systems
• Hands-on experience in web application security, including vulnerability scanning, penetration testing and incident response
• Solid understanding of OWASP Top 10 and secure coding principles; able to identify and mitigate common web vulnerabilities
• Familiarity with DevOps environments and security tooling (e.g., GitLab, SonarQube, Snyk, OIDC, openFGA and AWS IAM policies)
• Working knowledge of cloud platforms such as AWS, Azure or GCP, with a focus on secure architecture and deployment
• Practical experience with development frameworks and languages (e.g., Java, JavaScript) and writing secure code

We offer

• Competitive compensation depending on experience and skills
• Variety of projects within one company
• Being a part of a project following engineering excellence standards
• Individual career path and professional growth opportunities
• Internal events and communities
• Flexible work hours

Hybrid in Portugal: Lisbon