We are looking for an experienced Security Engineer to join our Digital Research & Innovation organization and help embed security from the design phase across SICPA’s digital products worldwide.You will play a global, transversal role, working closely with development and DevOps teams to identify vulnerabilities early, streamline security practices, and integrate security controls into modern cloud‑native environments.

SOFTWARE SECURITY ENGINEER

KEY OBJECTIVES

- Shift security left by addressing security early in the design and development process

- Automate and maintain security checks within CI/CD pipelines

- Reduce vulnerabilities before deployment

- Ensure compliance with security regulations and standards

- Promote collaboration between development, security, and operations teams worldwide

KEY RESPONSABILITIES

- Define and review security requirements and architectural designs across application, infrastructure, and network layers

- Provide security support during design and development phases of digital products

- Develop, maintain, and improve security and vulnerability scanning tools integrated into build pipelines

- Perform security reviews of pull requests, analyze vulnerabilities, and support remediation actions

- Execute preliminary audits, document findings, and contribute to risk mitigation strategies

- Identify vulnerabilities in applications and cloud‑native environments, including Kubernetes / OpenShift platforms and public cloud (AWS)

- Support secure deployment in public cloud environments

- Monitor industry security trends and assess potential impacts on products





- Contribute to quarterly planning and long‑term security improvement roadmaps

- Provide visibility on the security level per product and team

- Collaborate actively with general security teams across departments and regions

- Report security incidents and escalate issues when required

- When relevant, organise security workshops for technical teams

PROFILE

- University degree in Computer Science, Engineering, or equivalent

- 5+ years of experience in security engineering, application security, or secure software architecture

- Experience in application security testing tools (e.g. SonarQube is a plus)

- Experience in penetration testing or offensive security

- Software development experience, preferably in Java, JavaScript, and Python

- Experience with automation and infrastructure‑as‑code tools (Ansible, Terraform) is a plus

- Knowledge of Kubernetes / OpenShift is a strong advantage

- Knowledge of AWS security is a strong advantage

- Security certifications (OSCP, CEH, CISA) are a plus

- Strong communication and analytical skills in a global, cross‑functional environment

- Fluent in English; French is an asset

JOIN US!

- Our success comes from our highly skilled and talented employees

- Respectful entrepreneurship and a long-term vision are key for success

- Our people contribute to a more secure world

- Diversity at all levels of an organisation is a strengths

We offer an exciting and challenging role, with great potential for personal development within a unique organization in a fascinating industry. Your file will be handled with upmost confidentiality and discretion.

📌 Software Security Engineer (España)
🏢 Importante grupo
📍 España