Senior Application Security Engineer

The role

You will protect Thought Machine products against security risks and implement measures to minimize exposures and vulnerabilities. This involves engineering systems for technical security hurdles, protecting customer data, and consulting on security topics.

What you will do

• Drive improvements to product security posture through strategic planning and collaboration
• Produce production web scale grade application security design
• Review and produce data privacy and financial regulatory functional and nonfunctional designs
• Perform design reviews and Threat modeling of services and products
• Perform vulnerability assessments and security testing
• Provide subject matter expertise on security and privacy throughout the Software Development lifecycle
• Liaison with development teams for design, code reviews and education
• Contribute to security strategy and security tooling selection and creation
• Conduct regular security assessments and code reviews

Required qualifications

• Expertise with a programming language (e.g. Python, Go or Java)
• Experience of security in a DevOps environment
• Experience in web application penetration testing and security tooling (e.g. Burp proxy, Web/Network Scanners, Static code analysers, etc)
• Coding experience for automating/integrating security tools and creation of security tools
• Knowledge of security in distributed systems at scale
• Cloud and containers technology knowledge (e.g. AWS, GCP, Kuberbetes, Docker)
• Experience of performing security design reviews, threat modelling and risk assessments
• Knowledge of application security issues

Nice to have

• Professional security qualifications (e.g. CISSP, Offensive Security, Sans Institute, etc.)
• Contributions to the security community (public research, blogging, presentations, etc)
• Awareness and experience of the Data Protection Act, ISO 27001 and PCI-DSS

Benefits

• Highly competitive salary
• Voluntary Pension Plan (match up to 5%)
• Private Healthcare Insurance
• Comprehensive Life Insurance
• 25 days holiday plus public holidays
• Two charity days a year
• Daily Meal Allowance
• Access to outstanding learning materials and courses
• Sports and hobby clubs, subsidised by Thought Machine
• All the latest tech you need
• Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks

About the company

Thought Machine develops core and payments technology that runs natively in the cloud to rid banks of legacy technology. The company has more than 550 individuals across offices in London, New York, Singapore, Sydney and Lisbon.