Skip to content
Updated How AI-exposed are the skills employers are hiring for? See the data →

From the employer's careers site First seen 24 Oct 2026 · Still live on 31 Oct 2026

Application Security Engineer

Thought Machine Lisbon On-site senior full-time

Salary

€50K – €75K per year

Apply on Thought Machine

Description

We are seeking an Application Security Engineer to join our team in Lisbon. As a key player in our product security function, you will drive improvements to our product security posture, protect our products against security risks, and implement cutting-edge measures to minimise exposures and vulnerabilities.

Responsibilities:

  • Drive improvements to Thought Machine's product security posture through strategic planning and collaboration with development and infrastructure teams.
  • Produce production web-scale grade application security design.
  • Review and produce data privacy and financial regulatory functional and non-functional designs.
  • Perform design reviews and threat modeling of Thought Machine services and products.
  • Perform vulnerability assessments and security testing.
  • Provide subject matter expertise on all areas of security and privacy throughout the Software Development lifecycle.
  • Liaise with development teams for design, code reviews, and education.
  • Contribute to security strategy, security tooling selection, and creation.
  • Conduct regular security assessments and code reviews.

Requirements:

  • Expertise with a programming language (e.g., Python, Go, or Java).
  • Experience of security in a DevOps environment.
  • Experience in web application penetration testing and security tooling (e.g., Burp proxy, Web/Network Scanners, Static code analysers).
  • Coding experience for automating/integrating security tools and creation of security tools.
  • Knowledge of security in distributed systems at scale.
  • Cloud and containers technology knowledge (e.g., AWS, GCP, Kubernetes, Docker).
  • Experience of performing security design reviews, threat modeling, and risk assessments.
  • Knowledge of application security issues.

Benefits:

  • Highly competitive salary.
  • Voluntary Pension Plan (match up to 5%).
  • Private Healthcare Insurance.
  • Comprehensive Life Insurance.
  • 25 days holiday plus public holidays.
  • Two charity days a year.
  • Daily Meal Allowance.
  • Access to outstanding learning materials and courses.
  • Sports and hobby clubs, subsidised by Thought Machine.
  • All the latest tech you need.
  • Huge range of healthy (and not-so-healthy) snacks, smoothies, and drinks.
  • A talented and experienced team as your colleagues.
  • An environment where we encourage learning and progress.

Skills

Required

  • Programming languages (Python, Go, Java)
  • DevOps
  • Web application penetration testing
  • Security tooling
  • Distributed systems
  • Cloud and containers (AWS, GCP, Kubernetes, Docker)
  • Security design reviews
  • Threat modeling
  • Risk assessments

Nice to have

  • Professional security qualifications (CISSP, Offensive Security, Sans Institute)
  • Contributions to the security community
  • Awareness and experience of the Data Protection Act, ISO 27001, and PCI-DSS

Ready to apply?

You apply with the employer directly. Their original posting is here: https://jobs.ashbyhq.com/thought-machine/04cb6076-8265-44d3-9aa6-5f8a2d4e371e

Apply on Thought Machine