Senior Application Security Engineer
Thought Machine8 hours ago
Lisbon, PortugalSenior
Responsibilities
- Drive product security improvements through strategic planning and collaboration with development and infrastructure teams.
- Produce production-scale web application security designs and review data privacy and financial regulatory designs.
- Perform design reviews, threat modeling, vulnerability assessments, security testing, risk assessments, and code reviews.
- Provide security and privacy subject matter expertise throughout the software development lifecycle.
- Partner with development teams on design reviews, code reviews, education, and security enablement.
- Contribute to security strategy, security tooling selection and creation, and automation or integration of security tools.
Requirements
- Expertise with a programming language such as Python, Go, or Java.
- Experience with security in a DevOps environment, distributed systems at scale, and cloud and container technologies.
- Experience with web application penetration testing and security tooling, including proxies, web or network scanners, and static code analyzers.
- Coding experience for automating or integrating security tools and creating security tools.
- Experience performing security design reviews, threat modeling, and risk assessments.
- Knowledge of application security issues.
- Professional security qualifications such as CISSP, Offensive Security, or SANS Institute credentials are desirable.
- Contributions to the security community and awareness or experience with the Data Protection Act, ISO 27001, and PCI-DSS are desirable.
Benefits
- Full-time permanent position based in Lisbon with four days per week onsite.
- Voluntary pension plan with matching up to 5%.
- Private healthcare and comprehensive life insurance.
- 25 days of holiday plus public holidays and two charity days per year.
- Daily meal allowance.
- Access to learning materials, courses, sports and hobby clubs, and the latest technology.
- Inclusive workplace with professional development support.
Categories
About Thought Machine
Thought Machine builds cloud-native core and payments platforms for banks, centered on Vault Core, a microservices, API-driven core banking system delivered in the cloud. It sells enterprise software and services to banks and financial institutions, with engineers embedding to implement and integrate systems. Founded in 2014 and headquartered in London, the privately held company serves global banking markets and focuses on replacing legacy core infrastructure.