Senior Cloud Security Engineer

Thought Machine Group Limited; Portugal; Presencial; EUR 90 000 - 140 000; Tempo integral

Vantagens oferecidas por esta oferta de emprego

Highly competitive salary

Private Healthcare Insurance

Private Life Insurance

25 days holiday

Resumo da oferta

Thought Machine Group Limited in Lisbon is seeking a Senior Cloud Security Engineer to lead security design and delivery across cloud-native solutions. The role focuses on preventative and detective controls, automation, and tooling to securely scale our platforms.

You will work with cross-functional teams, applying threat modelling and secure design practices to protect production systems in a hybrid on-site environment in Lisbon.

Qualificações

• Experience building and deploying containerised apps in public cloud with CI/CD and automation.
• Knowledge of cloud networking, security, automation and orchestration.
• Experience with threat modelling and design reviews.
• Hands-on security in distributed systems and containers/Kubernetes.

Responsabilidades

• Provide security expertise and mentorship to Thought Machine engineering teams across planning, design and testing of new solutions.
• Lead design and delivery of cloud-native preventative and detective controls at scale.
• Build and maintain automation to audit infrastructure-as-code and in-place infrastructure.
• Develop security tooling and contribute to security products used in our environment.
• Co-develop threat models with engineering teams to identify threats and mitigations.
• Collaborate with cloud engineering and operations to maintain a secure production state.
• Perform security reviews and security testing.
• Lead complex projects to develop security capabilities and tooling.
• Contribute to the overall security strategy and tooling selection.

Conhecimentos

Containerization

CI/CD

Cloud security

Threat modelling

Kubernetes

Go/Python

Git

AWS

GCP

Infrastructure as Code

Ferramentas

Terraform

CloudFormation

Descrição da oferta de emprego

Overview

Thought Machine's mission is bold - to properly and permanently rid the world's banks of legacy technology. To achieve this, we have developed the foundations of modern banking through core and payments technology which run natively in the cloud. We have grown rapidly in the past few years, with more than 550 individuals across offices in London, New York, Singapore, Sydney and our Engineering Hub in Lisbon. We have raised more than £500m in funding with investors including Molten Ventures, Eurazeo, Intesa Sanpaolo, Temasek, Nyca Partners, JPMorgan Chase Strategic Investments, Standard Chartered Ventures, and more.

We have created a culture that enables our team to produce the best work in the industry while ensuring we have fun along the way. We are regularly cited as having a fantastic workplace culture and have been recognised for our Glassdoor ratings and employee share package. We are named as one of the world\'s most innovative fintechs by Global Finance Magazine and recognised by the Financial Times as one of Europe\'s fastest-growing companies for two consecutive years. This is a full-time, permanent position based in our Lisbon office, requiring four days a week onsite.

A Senior Cloud Security Engineer is part of the larger Security Engineering team. We desire engineers who can lead the engineering, design, and delivery of solutions to security problems, with a focus on innovative approaches to complex security challenges.

The Security Engineering team is cross-functional and comprises individuals with expertise in application security and infrastructure (cloud) security. Team members move between projects based on skills, experience and interests, collaborating to find the best solutions to complex problems.

The team covers the following areas, and individuals contribute based on their own expertise:

• Designs of secure products and platforms
• Reviews of engineering designs, threat models, and coding practices
• Threat modelling to identify relevant areas of focus
• Define the best in class protective and detective security controls
• Development of security tooling and automation
• Implement and maintain cutting-edge tools and measures

We look for people who think outside the box to create security solutions in our products and infrastructure, and who bring fresh perspectives to security challenges.

Responsibilities

• Provide security expertise and mentorship to Thought Machine engineering teams through planning, design, and testing of new solutions.
• Lead the design and delivery of cloud-native preventative and detective controls that operate at scale.
• Build and maintain automation to audit and assess infrastructure-as-code and in-place infrastructure.
• Develop (in code) security tooling, contribute to third-party security products, and update existing tooling in use in our environment.
• Co-develop threat models with engineering teams to identify threats and mitigation strategies.
• Work with cloud engineering and operations teams to maintain a secure operating state in production.
• Perform security reviews and security testing.
• Lead complex projects to develop security capabilities, tooling, and functionality.
• Contribute to the overall security strategy, tooling selection and creation.
• Collaborate across Thought Machine teams with trust and influence.

Requirements

Essential

• Familiarity with building and deploying containerised applications in public cloud using CI/CD frameworks and infrastructure automation
• Knowledge of cloud networking architecture, cloud operations, security, automation and orchestration
• Familiarity with performing security threat modelling and design reviews
• Knowledge of security in distributed systems
• Familiarity with good security practices with containers and Kubernetes
• Experience with languages such as Go, Python, or other modern programming languages
• Coding experience in the creation, automation, and integration of security tools
• Experience in version control systems such as Git
• Experience with designing, developing, and maintaining security in public cloud environments such as AWS and GCP
• Ability to lead and encourage good design skills including creative and critical thinking, collaboration, full evaluation of options, and objective decision making
• Strong interpersonal and communication skills to support collaboration with other personnel and teams

Desirable

• Existing experience building and operating distributed systems at scale
• Awareness and experience with well-architected cloud security frameworks or CSA-CCM
• Contributions to the security community (public research, blogging, presentations, etc)
• Experience in performing penetration testing and security testing
• Experience developing tools and interacting with cloud provider APIs

Benefits

• Highly competitive salary
• Voluntary Pension Plan (match up to 5%)
• Private Healthcare Insurance
• Comprehensive Life Insurance
• 25 days holiday plus public holidays
• Two charity days a year
• Daily Meal Allowance
• Access to outstanding learning materials and courses
• Sports and hobby clubs, subsidised by Thought Machine
• All the latest tech you need
• Huge range of healthy snacks, smoothies and drinks
• A talented and experienced team as your colleagues
• An environment where we encourage learning and progress

We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds, providing everyone with equal access to professional development. You are encouraged to apply even if your experience doesn\'t accurately match the job description. We also encourage applications from those with different abilities, including candidates with ADHD, autism, dyslexia or dyspraxia.