Security Control Engineer
Thought MachineResponsibilities
- Design and implement technical and operational security controls and capabilities for cloud-based and on-premise environments.
- Develop tools and processes for continuous audits and collect evidence supporting security and business continuity certifications.
- Work with software engineering teams to design technical solutions that meet product security requirements.
- Respond to client security queries and prepare accurate, detailed security materials for client and auditor presentations.
- Maintain and improve the organisation’s information security and business continuity management systems, standards, controls, and plans.
Requirements
- Experience designing and implementing security control solutions in cloud infrastructure such as AWS or GCP.
- Experience working directly with software engineering teams on technical security solutions.
- Experience automating security controls with code, such as Python or Go.
- Strong technical background in distributed systems, cloud security, and related technologies.
- Knowledge of threat modelling and threat probability and frequency analysis.
- Strong communication, collaboration, and ability to translate technical security concepts into business-relevant insights.
- Experience in a fast-paced technology environment or fintech sector is desirable.
- Knowledge of container security, Kubernetes, and Kafka is desirable.
- Experience obtaining or maintaining SOC 2, ISO 27001, or PCI-DSS certification is desirable.
- Experience leading security risk assessments and knowledge of the FAIR framework are desirable.
Benefits
- Voluntary Pension Plan with matching up to 5%.
- Private healthcare and comprehensive life insurance.
- 25 days of holiday plus public holidays.
- Two charity days per year and a daily meal allowance.
- Access to learning materials, courses, sports and hobby clubs, and subsidised activities.
- Latest technology, workplace snacks and drinks, and a supportive environment for learning and career progression.
- Full-time, permanent position based in Lisbon with four days per week onsite.
Categories
About Thought Machine
Our team’s mission is a bold one – to create technology that can run the world’s banks according to the best designs and software practices of the modern age. In doing so, we will properly and permanently rid the world’s banks of the problems generated by poor technology running on legacy infrastructure. Our solution to this is Vault Core: a complete core banking platform that is capable of being configured easily to suit the needs of any bank. We have built Vault Core from the ground up as a cloud-native, microservices and API-based platform. Thought Machine has a deep culture of engineering excellence, and our approach has engendered a seismic shift in the banking industry. Thought Machine is looking for highly talented individuals to help grow the company and achieve our ambitious goal. We pride ourselves on having an excellent internal culture, where we strive hard to create the best possible working environment; a healthy mix of great technical work, fast pace, a supportive atmosphere, and of course our irreverent sense of fun.