Senior AppSec Engineer: Cloud, DevSecOps & Threat Modeling

Thought Machine; Lisboa; On-site; EUR 75,000 - 95,000; Full time

Benefits offered by this job

Private Healthcare Insurance

Pension Plan (match up to 5%)

25 days holiday + public holidays

Learning and development resources

Job summary

Thought Machine, a leading fintech security innovator in Lisbon, seeks a security-focused engineer to strengthen product security across the SDLC. You will design secure systems, lead threat modeling, and collaborate with development and infrastructure teams to minimize vulnerabilities in a cutting-edge cloud-native environment.

The role emphasizes hands-on testing, data privacy, and proactive security tooling, with opportunities to mentor engineers and influence security strategy in a growing

Qualifications

• Proficiency in one or more programming languages (Python/Go/Java).
• Experience securing software in a DevOps environment.
• Hands-on in web application penetration testing and security tooling (Burp, scanners, static analyzers).
• Ability to automate/integrate security tooling via code.
• Knowledge of security in distributed systems at scale.
• Cloud and containers experience (AWS/GCP/Kubernetes/Docker).
• Experience in security design reviews, threat modeling and risk assessments.
• Knowledge of application security issues.

Responsibilities

• Improve Thought Machine's security posture through strategic planning with development and infrastructure teams.
• Produce production-grade security designs for web applications.
• Review data privacy and regulatory designs for compliance.
• Perform threat modeling and security architecture reviews of services.
• Conduct security assessments and vulnerability testing.
• Provide security expertise across the SDLC to engineering teams.

Skills

Python

Go

Java

DevOps security

Penetration testing

Automation

Threat modeling

Distributed systems security

Tools

Burp Suite

Web/Network Scanners

Static code analyzers

Cloud platforms

Kubernetes

Docker

Job description

Thought Machine, a leading fintech security innovator in Lisbon, seeks a security-focused engineer to strengthen product security across the SDLC. You will design secure systems, lead threat modeling, and collaborate with development and infrastructure teams to minimize vulnerabilities in a cutting-edge cloud-native environment.

The role emphasizes hands-on testing, data privacy, and proactive security tooling, with opportunities to mentor engineers and influence security strategy in a growing