Senior Security Engineer

Yoox Net-a-Porter Group

YOOX NET-A-PORTER GROUP is the world’s leading online luxury fashion retailer.

Technology is at the heart of YOOX NET-A-PORTER GROUP and is the driving force behind its success. Our in-house technology team allows The Group to give customers and brand partners the best possible experience across content and commerce, and to continually innovate and lead the online luxury industry.

Role Purpose:

As a Senior Application Security Engineer, you will help to maintain a safe and secure shopping experience for our customers. Our software and infrastructure engineering teams will rely on your expert guidance to help design, build and verify the security of their solutions.

Key Responsibilities:

  • Security consultancy and advice to software and infrastructure teams
  • Act as the infrastructure security specialist within the team
  • Providing teams with security requirements
  • Security design reviews
  • Security assessments, with and without documentation or source code

Essential Skills and Experience:

  • Good understanding of security design principles
  • Good understanding of networking and infrastructure security
  • Good understanding of software vulnerabilities
  • Working knowledge of at least one public/private cloud platform (e.g. AWS, VMWare)
  • Experience of working closely with both software and infrastructure development teams
  • Awareness of the principles of Infrastructure-as-Code
  • Competence in at least one programming language

Advantageous Skills and Experience:

  • Independent security research
  • Experience of working in a large eCommerce business
  • Experience of working with geographically remote teams
  • Good stakeholder management skills
  • Team lead experience
  • Close engagement with operational security teams
  • A desire to move into a team management role
  • Mentoring of more junior team members
  • Splunk SIEM experience

You must register to apply for this job.