Security Control Engineer

About the role

Thought Machine is looking for a Security Control Engineer to evaluate threats, design and implement technical and operational security solutions, and support clients and auditors. The role is based in Lisbon and requires four days a week onsite.

Key responsibilities

• Control design and implementation: develop tools, procedures and capabilities to mitigate security and business continuity risks.
• Continuous control assurance: create processes and evidence for certifications such as ISO 27001, ISO 22301, PCI‑DSS and SOC 2 Type 2.
• Client support: respond to client queries on technical security approaches and produce accurate, up‑to‑date documentation.
• Maintain ISMS and BCMS: keep security and continuity standards current with emerging threats and technology.

Required profile

• Experience designing and implementing security controls in cloud environments (AWS, GCP).
• Proven ability to work with software engineering teams to embed security requirements.
• Strong communication skills to translate technical security concepts for business stakeholders.
• Experience with security certifications such as ISO 27001, ISO 22301, PCI‑DSS, SOC 2.

Required skills

• AWS
• GCP
• Python
• Go
• Threat modelling
• Distributed systems
• Cloud security
• Container security
• Kubernetes
• Kafka
• ISO 27001
• ISO 22301
• PCI‑DSS
• SOC 2 Type 2

What we offer

• Highly competitive salary
• Voluntary pension plan (match up to 5 %)
• Private healthcare insurance
• Comprehensive life insurance
• 25 days holiday plus public holidays and two charity days
• Daily meal allowance and access to snacks and drinks
• Learning materials, courses and tech equipment
• Sports and hobby clubs subsidised by the company