# Senior Application Security Engineer

**Company**: Thought Machine
**Location**: Lisbon
**Work arrangement**: onsite
**Experience**: senior
**Job type**: Full time
**Salary**: €75K - €95K
**Category**: Security
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/thought-machine/ab2745ac-35d2-4639-a957-fefbb2b17867?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_1d5648b5-a9b

## Description

We are seeking a Senior Application Security Engineer to join our team in Lisbon. As a key player in our product security function, you will drive improvements to our product security posture, protect our products against security risks, and implement cutting-edge measures to minimise exposures and vulnerabilities.

**Responsibilities:**

- Drive improvements to Thought Machine's product security posture through strategic planning and collaboration with development and infrastructure teams.

- Produce production web-scale grade application security design.

- Review and produce data privacy and financial regulatory functional and non-functional designs.

- Perform design reviews and threat modeling of Thought Machine services and products.

- Perform vulnerability assessments and security testing.

- Provide subject matter expertise on all areas of security and privacy throughout the Software Development lifecycle.

- Liaison with development teams for design, code reviews & education.

- Contribute to security strategy, security tooling selection and creation.

- Conduct regular security assessments and code reviews.

**Requirements:**

- Expertise with a programming language (e.g., Python, Go, or Java).

- Experience of security in a DevOps environment.

- Experience in web application penetration testing and security tooling (e.g., Burp proxy, Web/Network Scanners, Static code analysers).

- Coding experience for automating/integrating security tools and creation of security tools.

- Knowledge of security in distributed systems at scale.

- Cloud and containers technology knowledge (e.g., AWS, GCP, Kubernetes, Docker).

- Experience of performing security design reviews, threat modelling, and risk assessments.

- Knowledge of application security issues.

**Benefits:**

- Highly competitive salary (€75K - €95K).

- Voluntary Pension Plan (match up to 5%).

- Private Healthcare Insurance.

- Comprehensive Life Insurance.

- 25 days holiday plus public holidays.

- Two charity days a year.

- Daily Meal Allowance.

- Access to outstanding learning materials and courses.

- Sports and hobby clubs, subsidised by Thought Machine.

- All the latest tech you need.

- Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks.

- A talented and experienced team as your colleagues.

- An environment where we encourage learning and progress.

## Skills

### Required
- Python
- Go
- Java
- DevOps
- Web Application Penetration Testing
- Burp proxy
- Web/Network Scanners
- Static code analysers
- Cloud
- Containers
- AWS
- GCP
- Kubernetes
- Docker
- Security Design Reviews
- Threat Modelling
- Risk Assessments

### Nice to have
- CISSP
- Offensive Security
- Sans Institute
- Data Protection Act
- ISO 27001
- PCI-DSS

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/thought-machine/ab2745ac-35d2-4639-a957-fefbb2b17867?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)