Descripción de la vacante For more than a century, L'Oréal has devoted its energy, innovation, and scientific excellence solely to one business: Beauty.

Our goal is to offer each and every person around the world the best of beauty in terms of quality, efficacy, safety, sincerity and responsibility to satisfy all beauty needs and desires in their infinite diversity.

- Scaling security within the SDLC by automation using tools sets such as source code analyzers, vulnerability scanners, configuration validation, and similar techniques.
- Application Penetration Testing

Utility development and scripting experience is a major plus.

The key responsibilities of the role are as follows:

- Performs security testing and code review to improve software security.
- Communicates risk assessment findings to stakeholders.
- Ensures compliance with industry, regulatory and L'Oreal Group defined policies and standards.
- Educate developers on secure development and coding best practices.
- Deliver with accountability on assigned tasks and project commitments.
- A commitment to the crucial concept of promoting security as an enabler and not an inhibitor of business.
- Strong organization, prioritization, rationalization, and analytics skills
- An ability to cultivate and build collaborative working relationships with a broad range of enterprise stakeholders.
- A well-developed understanding of and appreciation for business needs and a commitment to leading the information risk management team in delivering high-quality, prompt, and efficient service to the business.
- An ability to communicate complex and technical issues to diverse audiences.




- Ability to assess code security vulnerabilities, implement security measure and mitigating controls.

Typical Education and Experience

- BS or higher degree in Computer science, Information Security, or equivalent experience
- 2 years of professional experience in IT security engineering, software engineering, or computer science-based field.
- 2 years of hands-on development experience on the technologies and standards, such as: HTML, C , C#, JavaScript, JQuery, Python, PHP, SQL, JSON, XML,
- Understanding of SSL/TLS, REST, SAML, OAuth,
- Experience using Confluence, Burp Suite, SAST/SCA tools and cloud-based code sharing platforms (i.e. GitHub, ServiceNow, etc.)
- Experience with validation and testing of Vulnerabilities found during a penetration test and/or Bug bounty
- Working knowledge of eCommerce platforms such as SalesForce Commerce Cloud a plus.
- Experience with Agile/SCRUM and Classical (Waterfall) software development models, and thorough knowledge/understanding of enterprise SDLC process.

We Offer

- Protection: Protection for our employees (Medical & Health Insurance, Pension Plan and Flex Benefits)
- Health: Taking care of your physical and mental well-being (Employee Assistance Program, Medicall Home, Gym, Wellness Program, Health Day)
- Balance: Improve your level of personal and work life (Vacations, Personal Days, Flexibility, Friday Schedules and more )
- Workplace: More efficient and pleasant work (Parking and Corporate Cantine)
- Encouraging your Development: Learning Platform & Portfolio, International Mobility
- Supporting your Financial Health: Cash & Savings fund, tickets restaurant, Discount on L'Oréal Product and Bonuses

📌 It Application Security Coordinator (México)
🏢 L'Oréal
📍 México