<img src="https://performancemanager5.successfactors.eu/doc/custom/SICPA/2025_New%20Branding_Header_1000x325px_Beige_Woman.jpg" style="border:0.0px currentcolor;width:900.0px;height:293.0px"> We are looking for an experienced Security Engineer to join our Digital Research & Innovation organization and help embed security from the design phase across SICPA’s digital products worldwide.You will play a global, transversal role, working closely with development and DevOps teams to identify vulnerabilities early, streamline security practices, and integrate security controls into modern cloud‑native environments. SOFTWARE SECURITY ENGINEER KEY OBJECTIVES <ul> <li style="font-family:arial, helvetica, sans-serif">Shift security left by addressing security early in the design and development process</li> <li style="font-family:arial, helvetica, sans-serif">Automate and maintain security checks within CI/CD pipelines</li> <li style="font-family:arial, helvetica, sans-serif">Reduce vulnerabilities before deployment</li> <li style="font-family:arial, helvetica, sans-serif">Ensure compliance with security regulations and standards</li> <li style="font-family:arial, helvetica, sans-serif">Promote collaboration between development, security, and operations teams worldwide</li> </ul> KEY RESPONSABILITIES <ul> <li style="font-family:arial, helvetica, sans-serif">Define and review security requirements and architectural designs across application, infrastructure, and network layers</li> <li style="font-family:arial, helvetica, sans-serif">Provide security support during design and development phases of digital products</li> <li style="font-family:arial, helvetica, sans-serif">Develop, maintain, and improve security and vulnerability scanning tools integrated into build pipelines</li> <li style="font-family:arial, helvetica, sans-serif">Perform security reviews of pull requests, analyze vulnerabilities, and support remediation actions</li> <li style="font-family:arial, helvetica, sans-serif">Execute preliminary audits, document findings, and contribute to risk mitigation strategies</li> <li style="font-family:arial, helvetica, sans-serif">Identify vulnerabilities in applications and cloud‑native environments, including Kubernetes / OpenShift platforms and public cloud (AWS)</li> <li style="font-family:arial, helvetica, sans-serif">Support secure deployment in public cloud environments</li> <li style="font-family:arial, helvetica, sans-serif">Monitor industry security trends and assess potential impacts on products</li> <li style="font-family:arial, helvetica, sans-serif">Contribute to quarterly planning and long‑term security improvement roadmaps</li> <li style="font-family:arial, helvetica, sans-serif">Provide visibility on the security level per product and team</li> <li style="font-family:arial, helvetica, sans-serif">Collaborate actively with global security teams across departments and regions</li> <li style="font-family:arial, helvetica, sans-serif">Report security incidents and escalate issues when required</li> <li style="font-family:arial, helvetica, sans-serif">When relevant, organise security workshops for technical teams</li> </ul> PROFILE <ul> <li style="font-family:arial, helvetica, sans-serif">University degree in Computer Science, Engineering, or equivalent</li> <li style="font-family:arial, helvetica, sans-serif">5+ years of experience in security engineering, application security, or secure software architecture</li> <li style="font-family:arial, helvetica, sans-serif">Experience in application security testing tools (e.g. SonarQube is a plus)</li> <li style="font-family:arial, helvetica, sans-serif">Experience in penetration testing or offensive security</li> <li style="font-family:arial, helvetica, sans-serif">Software development experience, preferably in Java, JavaScript, and Python</li> <li style="font-family:arial, helvetica, sans-serif">Experience with automation and infrastructure‑as‑code tools (Ansible, Terraform) is a plus</li> <li style="font-family:arial, helvetica, sans-serif">Knowledge of Kubernetes / OpenShift is a strong advantage</li> <li style="font-family:arial, helvetica, sans-serif">Knowledge of AWS security is a strong advantage</li> <li style="font-family:arial, helvetica, sans-serif">Security certifications (OSCP, CEH, CISA) are a plus</li> <li style="font-family:arial, helvetica, sans-serif">Strong communication and analytical skills in a global, cross‑functional environment</li> <li style="font-family:arial, helvetica, sans-serif">Fluent in English; French is an asset</li> </ul> JOIN US! <ul> <li style="font-family:arial, helvetica, sans-serif">Our success comes from our highly skilled and talented employees</li> <li style="font-family:arial, helvetica, sans-serif">Respectful entrepreneurship and a long-term vision are key for success</li> <li style="font-family:arial, helvetica, sans-serif">Our people contribute to a more secure world</li> <li style="font-family:arial, helvetica, sans-serif">Diversity at all levels of an organisation is a strengths</li> </ul> We offer an exciting and challenging role, with great potential for personal development within a unique organization in a fascinating industry. Your file will be handled with upmost confidentiality and discretion.

Software Security Engineer (Madrid, Spain) @ sicpa

About this role

Ready to apply?