Application Security Engineer
Thought MachineResponsibilities
- Drive improvements to the product security posture through strategic planning and collaboration with development and infrastructure teams.
- Produce production-scale web application security designs.
- Review and produce data privacy and financial regulatory functional and nonfunctional designs.
- Perform design reviews, threat modeling, risk assessments, vulnerability assessments, security testing, and regular code reviews.
- Provide security and privacy subject matter expertise throughout the software development lifecycle.
- Partner with development teams on design, code reviews, security education, and developer enablement.
- Contribute to security strategy, security tooling selection, and creation of security tools.
- Automate and integrate security tools through coding.
Requirements
- Expertise with a programming language such as Python, Go, or Java.
- Experience with security in a DevOps environment and distributed systems at scale.
- Experience with web application penetration testing and security tooling such as Burp Proxy, web or network scanners, and static code analyzers.
- Coding experience for automating and integrating security tools and creating security tools.
- Knowledge of cloud and container technologies such as AWS, GCP, Kubernetes, and Docker.
- Experience conducting security design reviews, threat modeling, and risk assessments.
- Knowledge of application security issues.
- Professional security qualifications such as CISSP, Offensive Security, or SANS Institute qualifications are desirable.
- Contributions to the security community through public research, blogging, or presentations are desirable.
- Awareness and experience with the Data Protection Act, ISO 27001, and PCI-DSS are desirable.
Benefits
- Highly competitive salary.
- Voluntary Pension Plan with matching up to 5%.
- Private healthcare insurance and comprehensive life insurance.
- 25 days of holiday plus public holidays.
- Two charity days per year and a daily meal allowance.
- Access to learning materials and courses, sports and hobby clubs subsidized by Thought Machine, and the latest technology.
- Full-time, permanent position based in Lisbon requiring four days per week onsite.
- Inclusive workplace with professional development access and support for candidates with different abilities.
Categories
About Thought Machine
Our team’s mission is a bold one – to create technology that can run the world’s banks according to the best designs and software practices of the modern age. In doing so, we will properly and permanently rid the world’s banks of the problems generated by poor technology running on legacy infrastructure. Our solution to this is Vault Core: a complete core banking platform that is capable of being configured easily to suit the needs of any bank. We have built Vault Core from the ground up as a cloud-native, microservices and API-based platform. Thought Machine has a deep culture of engineering excellence, and our approach has engendered a seismic shift in the banking industry. Thought Machine is looking for highly talented individuals to help grow the company and achieve our ambitious goal. We pride ourselves on having an excellent internal culture, where we strive hard to create the best possible working environment; a healthy mix of great technical work, fast pace, a supportive atmosphere, and of course our irreverent sense of fun.