Cloud Security Engineer

About the role

Thought Machine is looking for a Cloud Security Engineer to join its Security Engineering team in Lisbon. This full‑time permanent role will work on designing and implementing security controls for cloud‑native banking platforms, collaborating closely with engineering and operations teams. The position requires four days a week onsite.

Key responsibilities

• Provide security expertise and mentorship throughout planning, design and testing of new solutions.
• Build and maintain automation that audits infrastructure‑as‑code and live infrastructure.
• Design and implement cloud‑native preventative and detective controls at scale.
• Co‑develop threat models with engineering teams and define mitigation strategies.
• Develop security tooling in code, contribute to third‑party products and maintain existing tools.
• Work with cloud engineering and operations to keep production environments securely operating.
• Perform security reviews, testing and contribute to the overall security strategy.

Required profile

• Experience building and deploying containerised applications in public cloud using CI/CD and infrastructure automation.
• Strong knowledge of cloud networking architecture, cloud operations and security automation.
• Hands‑on experience with threat modelling, security design reviews and security in distributed systems.
• Familiarity with container security and Kubernetes.
• Proficiency in Go, Python or other modern programming languages.
• Experience with Git and designing security for AWS and GCP environments.

Required skills

• Containerised applications
• CI/CD frameworks
• Infrastructure automation
• Cloud networking architecture
• Cloud operations
• Threat modelling
• Security in distributed systems
• Containers
• Kubernetes
• Go
• Python
• Git
• AWS
• GCP
• Cloud provider APIs