We are looking for an experienced Security Engineer to join our Digital Research & Innovation organization and help embed security from the design phase across SICPA’s digital products worldwide.You will play a global, transversal role, working closely with development and DevOps teams to identify vulnerabilities early, streamline security practices, and integrate security controls into modern cloud‑native environments.

SOFTWARE SECURITY ENGINEER

KEY OBJECTIVES

Shift security left by addressing security early in the design and development process
Automate and maintain security checks within CI/CD pipelines
Reduce vulnerabilities before deployment
Ensure compliance with security regulations and standards
Promote collaboration between development, security, and operations teams worldwide

KEY RESPONSABILITIES

Define and review security requirements and architectural designs across application, infrastructure, and network layers
Provide security support during design and development phases of digital products
Develop, maintain, and improve security and vulnerability scanning tools integrated into build pipelines
Perform security reviews of pull requests, analyze vulnerabilities, and support remediation actions
Execute preliminary audits, document findings, and contribute to risk mitigation strategies
Identify vulnerabilities in applications and cloud‑native environments, including Kubernetes / OpenShift platforms and public cloud (AWS)
Support secure deployment in public cloud environments
Monitor industry security trends and assess potential impacts on products




Contribute to quarterly planning and long‑term security improvement roadmaps
Provide visibility on the security level per product and team
Collaborate actively with integral security teams across departments and regions
Report security incidents and escalate issues when required
When relevant, organise security workshops for technical teams

PROFILE

University degree in Computer Science, Engineering, or equivalent
5+ years of experience in security engineering, application security, or secure software architecture
Experience in application security testing tools (e.g. SonarQube is a plus)
Experience in penetration testing or offensive security
Software development experience, preferably in Java, JavaScript, and Python
Experience with automation and infrastructure‑as‑code tools (Ansible, Terraform) is a plus
Knowledge of Kubernetes / OpenShift is a strong advantage
Knowledge of AWS security is a strong advantage
Security certifications (OSCP, CEH, CISA) are a plus
Strong communication and analytical skills in a global, cross‑functional environment
Fluent in English; French is an asset

JOIN US!

Our success comes from our highly skilled and talented employees
Respectful entrepreneurship and a long-term vision are key for success
Our people contribute to a more secure world
Diversity at all levels of an organisation is a strengths

We offer an exciting and challenging role, with great potential for personal development within a unique organization in a fascinating industry. Your file will be handled with upmost confidentiality and discretion.

📌 Software Security Engineer (España)
🏢 Sicpa
📍 España