# Application Security Engineer

**Company**: Thought Machine
**Location**: Lisbon
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Salary**: €50K – €75K
**Category**: Engineering
**Industry**: Technology

**Apply**: https://jobs.ashbyhq.com/thought-machine/04cb6076-8265-44d3-9aa6-5f8a2d4e371e?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_9c5e0277-4d9

## Description

We are seeking an Application Security Engineer to join our team in Lisbon. As a key player in our product security function, you will drive improvements to our product security posture, protect our products against security risks, and implement cutting-edge measures to minimise exposures and vulnerabilities.

**Responsibilities:**

- Drive improvements to Thought Machine's product security posture through strategic planning and collaboration with development and infrastructure teams.

- Produce production web-scale grade application security design.

- Review and produce data privacy and financial regulatory functional and non-functional designs.

- Perform design reviews and threat modeling of Thought Machine services and products.

- Perform vulnerability assessments and security testing.

- Provide subject matter expertise on all areas of security and privacy throughout the Software Development lifecycle.

- Liaise with development teams for design, code reviews, and education.

- Contribute to security strategy, security tooling selection, and creation.

- Conduct regular security assessments and code reviews.

**Requirements:**

- Expertise with a programming language (e.g., Python, Go, or Java).

- Experience of security in a DevOps environment.

- Experience in web application penetration testing and security tooling (e.g., Burp proxy, Web/Network Scanners, Static code analysers).

- Coding experience for automating/integrating security tools and creation of security tools.

- Knowledge of security in distributed systems at scale.

- Cloud and containers technology knowledge (e.g., AWS, GCP, Kubernetes, Docker).

- Experience of performing security design reviews, threat modeling, and risk assessments.

- Knowledge of application security issues.

**Benefits:**

- Highly competitive salary.

- Voluntary Pension Plan (match up to 5%).

- Private Healthcare Insurance.

- Comprehensive Life Insurance.

- 25 days holiday plus public holidays.

- Two charity days a year.

- Daily Meal Allowance.

- Access to outstanding learning materials and courses.

- Sports and hobby clubs, subsidised by Thought Machine.

- All the latest tech you need.

- Huge range of healthy (and not-so-healthy) snacks, smoothies, and drinks.

- A talented and experienced team as your colleagues.

- An environment where we encourage learning and progress.

## Skills

### Required
- Programming languages (Python, Go, Java)
- DevOps
- Web application penetration testing
- Security tooling
- Distributed systems
- Cloud and containers (AWS, GCP, Kubernetes, Docker)
- Security design reviews
- Threat modeling
- Risk assessments

### Nice to have
- Professional security qualifications (CISSP, Offensive Security, Sans Institute)
- Contributions to the security community
- Awareness and experience of the Data Protection Act, ISO 27001, and PCI-DSS

---

Source: [Apply at jobs.ashbyhq.com](https://jobs.ashbyhq.com/thought-machine/04cb6076-8265-44d3-9aa6-5f8a2d4e371e?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)