Senior Application Security Engineer

Thought Machine Group Limited; Portugal; Presencial; EUR 60 000 - 80 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Highly competitive salary

Private Healthcare Insurance

Voluntary Pension Plan

25 days holiday plus public holidays

Daily Meal Allowance

Resumo da oferta

Thought Machine Group Limited is seeking a Security Specialist in Portugal to enhance our product security posture through strategic planning and collaboration with development teams. This role involves conducting vulnerability assessments, performing security testing, and providing expertise on security throughout the Software Development lifecycle.

The successful candidate will have experience in programming, web application security, and cloud technologies. Benefits include a competitive salary, private healthcare insurance, and opportunities for professional development.

Qualificações

• 5+ years of experience in application security.
• Proven track record in security design, threat modeling, and risk assessments.
• Strong coding experience for automating security tools.

Responsabilidades

• Drive improvements to security posture through strategic planning and collaboration.
• Conduct vulnerability assessments and security testing.
• Liaise with development teams for design and code reviews.

Conhecimentos

Programming language expertise (Python, Go, Java)

Security in a DevOps environment

Web application penetration testing

Security tooling experience (Burp proxy, scanners)

Cloud and container technologies (AWS, GCP, Docker)

Security design reviews

Knowledge of application security issues

Formação académica

Professional security qualifications (CISSP, Offensive Security)

Ferramentas

Burp proxy

Static code analysers

Descrição da oferta de emprego

DUTIES

• Drive improvements to Thought Machine’s product security posture through strategic planning and collaboration with development and infrastructure teams, with trust, autonomy and influence.
• Produce production web‑scale grade application security design.
• Review and produce data privacy and financial regulatory functional and non‑functional designs.
• Perform design reviews and threat modeling of Thought Machine services and products.
• Conduct vulnerability assessments and security testing.
• Provide subject‑matter expertise on all areas of security and privacy throughout the Software Development lifecycle.
• Liaise with development teams for design, code reviews and education.
• Contribute to security strategy, security tooling selection and creation.
• Conduct regular security assessments and code reviews.

REQUIREMENTS

Essential

• Expertise with a programming language (e.g., Python, Go or Java).
• Experience with security in a DevOps environment.
• Experience in web application penetration testing and security tooling (e.g., Burp proxy, web/network scanners, static code analysers).
• Coding experience for automating/integrating security tools and creating security tools.
• Knowledge of security in distributed systems at scale.
• Knowledge of cloud and container technologies (e.g., AWS, GCP, Kubernetes, Docker).
• Experience performing security design reviews, threat modelling and risk assessments.
• Knowledge of application security issues.

Desirable

• Professional security qualifications (e.g., CISSP, Offensive Security, SANS Institute).
• Contributions to the security community (public research, blogging, presentations).
• Awareness of the Data Protection Act, ISO 27001 and PCI‑DSS.

Benefits

• Highly competitive salary.
• Voluntary Pension Plan (match up to 5%).
• Private Healthcare Insurance.
• Comprehensive Life Insurance.
• 25 days holiday plus public holidays.
• Two charity days a year.
• Daily Meal Allowance.
• Access to outstanding learning materials and courses.
• Sports and hobby clubs, subsidised by Thought Machine.
• All the latest tech you need.
• Huge range of healthy (and not‑so‑healthy) snacks, smoothies and drinks.
• A talented and experienced team as your colleagues.
• An environment where we encourage learning and progress.

We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds, providing equal access to professional development. Candidates with different abilities, including those with ADHD, autism, dyslexia or dyspraxia, are encouraged to apply.