Senior Application Security Engineer

About the role

We are looking for a Senior Application Security Engineer to join Thought Machine’s Lisbon engineering hub. In this role you will lead the design and implementation of security measures that protect our cloud‑native banking platform and ensure compliance with data‑privacy and financial regulations.

Key responsibilities

• Drive improvements to the product security posture through strategic planning and collaboration with development and infrastructure teams.
• Design and deliver production‑grade, web‑scale application security architectures.
• Review and produce data‑privacy and financial regulatory functional and non‑functional designs.
• Conduct design reviews, threat modelling and security assessments for new features.
• Mentor and enable developers on secure coding practices and DevSecOps processes.
• Lead cross‑functional initiatives to address security challenges in a green‑field fintech environment.

Required profile

• Proven experience with OWASP Top 10 vulnerabilities and mitigation techniques.
• Strong background in DevSecOps, security design and threat modelling.
• Hands‑on knowledge of data‑privacy protection and financial regulatory requirements.
• Ability to work autonomously, manage multiple projects and drive security initiatives end‑to‑end.
• Passion for mentoring engineers and fostering a security‑first culture.

Required skills

• OWASP Top 10
• DevSecOps
• Threat modelling
• Data privacy protection
• Security design
• Web application security
• Cloud‑native security

What we offer

• Dynamic fintech environment with a fast‑growing global team.
• Competitive compensation and generous employee share package.
• Opportunity to shape security for the next generation of banking technology.