Senior Application Security Engineer

Thought Machine; Lisboa; Presencial; EUR 60 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Highly competitive salary

Voluntary Pension Plan (match up to 5%)

Private Healthcare Insurance

Comprehensive Life Insurance

25 days holiday plus public holidays

Two charity days a year

Daily Meal Allowance

Access to outstanding learning materials and courses

Sports and hobby clubs, subsidised

Tech resources and snacks

Resumo da oferta

Thought Machine is seeking a skilled security specialist to enhance our product's security posture based in Lisbon. You will drive strategic planning and collaborate with development and infrastructure teams. Responsibilities include performing design reviews, vulnerability testing, and contributing to our security strategy.

The ideal candidate has expertise in programming (Python, Go, Java), and experience in security within DevOps. Join us for a competitive salary and extensive benefits including a voluntary pension plan and private healthcare.

Qualificações

• Expertise with a programming language (e.g., Python, Go, or Java).
• Experience in security in a DevOps environment.
• Experience in web application penetration testing and security tooling.

Responsabilidades

• Drive improvements to product security posture through strategic planning.
• Produce web-scale application security design.
• Perform design reviews and threat modeling.

Conhecimentos

Programming language expertise (Python, Go, or Java)

Security in a DevOps environment

Web application penetration testing

Automation and integration of security tools

Security in distributed systems

Cloud and container technology knowledge (AWS, GCP, Kubernetes, Docker)

Security design reviews and threat modeling

Application security issues knowledge

Ferramentas

Burp Proxy

Web/Network Scanners

Static code analyzers

Descrição da oferta de emprego

This is a full-time, permanent position based in our Lisbon office, requiring four days a week onsite.

Duties

• Drive improvements to Thought Machine's product security posture through strategic planning and collaboration with both development and infrastructure teams, with trust, autonomy and influence.
• Produce production web-scale grade application security design.
• Review and produce data privacy and financial regulatory functional and non-functional designs.
• Perform design reviews and threat modeling of Thought Machine services and products.
• Perform vulnerability assessments and security testing.
• Provide subject matter expertise on all areas of security and privacy throughout the Software Development lifecycle.
• Liaise with development teams for design, code reviews & education.
• Contribute to security strategy, security tooling selection and creation.
• Conduct regular security assessments and code reviews.

Requirements

• Expertise with a programming language (e.g., Python, Go, or Java).
• Experience in security in a DevOps environment.
• Experience in web application penetration testing and security tooling (e.g., Burp Proxy, Web/Network Scanners, Static code analysers).
• Coding experience for automating/integrating security tools and creation of security tools.
• Knowledge of security in distributed systems at scale.
• Cloud and container technology knowledge (e.g., AWS, GCP, Kubernetes, Docker).
• Experience performing security design reviews, threat modelling and risk assessments.
• Knowledge of application security issues.

Desirable Requirements

• Professional security qualifications (e.g., CISSP, Offensive Security, SANS Institute).
• Contributions to the security community (public research, blogging, presentations).
• Awareness and experience of the Data Protection Act, ISO 27001 and PCI-DSS.

Benefits

• Highly competitive salary.
• Voluntary Pension Plan (match up to 5%).
• Private Healthcare Insurance.
• Comprehensive Life Insurance.
• 25 days holiday plus public holidays.
• Two charity days a year.
• Daily Meal Allowance.
• Access to outstanding learning materials and courses.
• Sports and hobby clubs, subsidised by Thought Machine.
• All the latest tech you need.
• Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks.
• A talented and experienced team as your colleagues.
• An environment where we encourage learning and progress.

Equal Opportunity & Diversity

We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds, providing everyone with equal access to professional development. We also encourage applications from those with different abilities, including candidates with ADHD, autism, dyslexia or dyspraxia.