Cloud Security Engineer

Thought Machine Group Limited; Portugal; Presencial; EUR 45 000 - 70 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Highly competitive salary

Voluntary Pension Plan (match up to 5%)

Private Healthcare Insurance

Comprehensive Life Insurance

25 days holiday plus public holidays

Two charity days a year

Daily Meal Allowance

Access to outstanding learning materials and courses

Sports and hobby clubs, subsidised by the company

All the latest tech you need

Snacks and drinks

Talented and experienced team

Encouragement of learning and progress

Resumo da oferta

Thought Machine Group Limited in Portugal is seeking a Cloud Security Engineer who will contribute to the Security Engineering team. The role demands creativity in building and designing security solutions, engaging with cross-functional teams to ensure a secure product and platform.

Essential qualifications include familiarity with cloud security practices, coding in languages like Go and Python, and strong skills in building containerised applications. The company offers a competitive salary, private healthcare, and an environment encouraging professional growth.

Qualificações

• Familiarity with building and deploying containerised applications in public cloud.
• Knowledge of cloud operations and security.
• Experience with coding and integrating security tools.
• Strong interpersonal and communication skills.

Responsabilidades

• Provide security expertise to engineering teams during planning and design.
• Co-develop threat models with engineering teams.
• Design and build cloud-native security controls.
• Build and maintain automation for auditing infrastructure.
• Perform security reviews and contribute to security strategy.

Conhecimentos

Containerised applications

Cloud networking architecture

Security threat modelling

Security in distributed systems

Kubernetes security practices

Modern programming languages (Go, Python)

Security tool integration

Version control (Git)

Public cloud environments (AWS, GCP)

Interpersonal communication

Descrição da oferta de emprego

A Cloud Security Engineer is a contributor to the larger Security Engineering team. We desire engineers who are able to think creatively, design, and build solutions to security problems. We have a passion for exploration of unique solutions and sharing of unique perspectives that you can bring to the team and its work.

The Security Engineering team is cross‑functional and made up of diverse people who bring their own unique expertise in either (or both) application security and infrastructure (cloud) security. We allow team members to move from project to project, subject to the skills, experience, and interests. Each team member brings their own expertise to bear in ways that are collaborative and designed to find the best solutions to complex problems.

The team covers the following areas, and individuals contribute to any of them based on their own expertise:

• Designs and reviews to build a secure product and platform
• Threat modelling to identify relevant areas of focus
• Define the best in class protective and detective security controls
• Development of security tooling and automation
• Implement and maintain cutting‑edge tools and measures

DUTIES

• Provide security expertise and mentorship to Thought Machine engineering teams through the stages of planning, design, and testing of new solutions.
• Co‑develop threat models with engineering teams that identify relevant threats and relevant strategies for mitigation.
• Design and build cloud native preventative and detective controls that operate at scale.
• Build and maintain automation to actively audit and assess infrastructure‑as‑code and in‑place infrastructure.
• Develop (in code) security tooling, contribute to third‑party security products, and develop updates for existing tooling that is in use in our environment.
• Work with cloud engineering and operations teams to develop tooling that maintains our secure operating state in production.
• Perform security reviews and security testing.
• Contribute to the overall security strategy, security tooling selection and creation.
• Operate collaboratively with other Thought Machine teams with trust and influence.

REQUIREMENTS

Essential

• Familiarity with building and deploying containerised applications in public cloud using CI/CD frameworks and infrastructure automation.
• Knowledge of cloud networking architecture, cloud operations, security, automation and orchestration.
• Familiarity with performing security threat modelling and design reviews.
• Knowledge of security in distributed systems.
• Familiarity with good security practices with containers and Kubernetes.
• Experience with languages such as Go, Python, or other modern programming languages.
• Coding experience in the creation, automation, and integration of security tools.
• Experience in version control systems such as Git.
• Experience with designing, developing, and maintaining security in public cloud environments such as AWS and GCP.
• Strong interpersonal and communication skills to support collaboration with other personnel and teams.

Desirable

• Existing experience building and operating distributed systems at scale.
• Awareness and experience with "well‑architected" cloud security frameworks or CSA‑CCM.
• Contributions to the security community (public research, blogging, presentations, etc).
• Experience in performing web application penetration testing and security tooling.
• Experience developing tools and interacting with cloud provider APIs.

Benefits

• Highly competitive salary
• Voluntary Pension Plan (match up to 5%)
• Private Healthcare Insurance
• Comprehensive Life Insurance
• 25 days holiday plus public holidays
• Two charity days a year
• Daily Meal Allowance
• Access to outstanding learning materials and courses
• Sports and hobby clubs, subsidised by Thought Machine
• All the latest tech you need
• Huge range of healthy (and not‑so‑healthy) snacks, smoothies and drinks
• A talented and experienced team as your colleagues
• An environment where we encourage learning and progress

We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds, providing everyone with equal access to professional development. You are encouraged to apply even if your experience doesn't accurately match the job description. We also encourage applications from those with different abilities, including candidates with ADHD, autism, dyslexia or dyspraxia.