Senior Security Control Engineer

The role

The Senior Security Control Engineer will evaluate threats and risks to design and implement technical and operational security solutions. This role involves developing controls, performing continuous audits, and supporting client queries regarding security posture.

What you will do

• Participate in the technical and operational design and implementation of capabilities, tools, and procedures to mitigate security and business continuity risks.
• Provide process and technical domain expertise in product and operational security, business continuity, and disaster recovery plans.
• Develop and implement tools and processes for continuous audits and obtaining evidence for certifications like ISO27001, ISO22301, PCI-DSS, and SOC 2 Type 2.
• Respond to client queries regarding technical security approaches.
• Develop materials for distribution and presentation to clients regarding security approach.
• Ensure security and business continuity approaches are kept up to date with new threats and standards.
• Maintain standards, controls, and plans in line with company, client, and technology stack changes.

Required qualifications

• Experience designing and implementing technical solutions to deliver security controls and capabilities in cloud-based infrastructure (e.g. AWS, GCP).
• Experience in working directly with software engineering teams in designing new technical solutions to meet security requirements in products.
• Experience with control automation via code (e.g. Python, Go).
• Strong technical background, with experience in distributed systems, cloud security, and related technologies.
• Knowledge of threat modelling for the purposes of understanding threat probabilities and frequency.
• Excellent communication skills with an ability to translate technical and security jargon into business-relevant insights.
• Ability to collaborate effectively with other departments and external stakeholders.

Nice to have

• Experience in a fast-paced tech environment or fintech sector.
• Knowledge of container security, Kubernetes, Kafka, and other emergent technologies.
• Experience with obtaining and maintaining a security certification such as SOC 2, ISO 27001, PCI-DSS.
• Proficiency in leading security risk assessments, preferably with knowledge of the FAIR framework

Benefits

• Highly competitive salary
• Voluntary Pension Plan (match up to 5%)
• Private Healthcare Insurance
• Comprehensive Life Insurance
• 25 days holiday plus public holidays
• Two charity days a year
• Daily Meal Allowance
• Access to outstanding learning materials and courses
• Sports and hobby clubs, subsidised by Thought Machine
• All the latest tech you need
• Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks
• An environment where we encourage learning and progress

About the company

Thought Machine develops core and payments technology that runs natively in the cloud to replace legacy banking technology. The company has more than 550 individuals across offices in London, New York, Singapore, Sydney and Lisbon.