Application Security Engineer
Thought Machine5 hours ago
Lisbon, PortugalSenior
Responsibilities
- Drive improvements to Thought Machine’s product-security posture through strategic planning and collaboration with development and infrastructure teams.
- Produce production-grade, web-scale application-security designs.
- Review and produce data-privacy and financial-regulatory functional and nonfunctional designs.
- Conduct design reviews, threat modeling, vulnerability assessments, security testing, risk assessments, and regular code reviews.
- Provide security and privacy subject-matter expertise throughout the software development lifecycle.
- Partner with development teams on design reviews, code reviews, and security education.
- Contribute to security strategy, security-tool selection, and the creation and automation of security tools.
Requirements
- Expertise with a programming language such as Python, Go, or Java.
- Experience with security in a DevOps environment and knowledge of security in distributed systems at scale.
- Experience with web-application penetration testing and security tooling, including Burp Proxy, web or network scanners, and static code analyzers.
- Coding experience for automating and integrating security tools and creating security tools.
- Knowledge of cloud and container technologies such as AWS, GCP, Kubernetes, and Docker.
- Experience performing security design reviews, threat modeling, and risk assessments.
- Knowledge of application-security issues, including OWASP Top 10 vulnerabilities.
- Professional security qualifications such as CISSP, Offensive Security, or SANS Institute certifications are desirable.
- Contributions to the security community through public research, blogging, or presentations are desirable.
- Awareness and experience with the Data Protection Act, ISO 27001, and PCI-DSS are desirable.
Benefits
- Full-time, permanent employment based in Lisbon.
- Four days per week onsite.
- Voluntary pension plan with matching contributions up to 5%.
- Private healthcare insurance and comprehensive life insurance.
- 25 days of holiday plus public holidays.
- Two charity days per year and a daily meal allowance.
- Access to learning materials, courses, sports clubs, hobby clubs, snacks, smoothies, drinks, and the latest technology.
- Equal access to professional development and an inclusive workplace welcoming candidates from varied backgrounds and with different abilities.
Categories
About Thought Machine
Thought Machine builds cloud-native core and payments platforms for banks, centered on Vault Core, a microservices, API-driven core banking system delivered in the cloud. It sells enterprise software and services to banks and financial institutions, with engineers embedding to implement and integrate systems. Founded in 2014 and headquartered in London, the privately held company serves global banking markets and focuses on replacing legacy core infrastructure.