Application Security Engineer

About the role

Thought Machine is building the next generation of banking technology in the cloud. As an Application Security Engineer you will lead the effort to secure our core and payments products, working closely with development and infrastructure teams to embed security throughout the product lifecycle.

Key responsibilities

• Drive improvements to the product security posture through strategic planning and cross‑team collaboration.
• Design and implement web‑scale application security architectures.
• Produce data‑privacy and financial‑regulatory functional and non‑functional designs.
• Conduct design reviews, threat modeling, and security assessments for new features.
• Mentor developers on secure coding practices and DevSecOps integration.

Required profile

• Proven experience with OWASP Top 10 vulnerabilities.
• Hands‑on expertise in DevSecOps pipelines and automation.
• Strong understanding of data‑privacy protection and financial regulatory requirements.
• Ability to work autonomously on multiple projects and guide engineering teams.

Required skills

• OWASP Top 10
• DevSecOps
• Data privacy protection
• Threat modeling

What we offer

• Competitive compensation and generous employee share package.
• Dynamic, fast‑growing fintech environment with offices worldwide.
• Opportunity to shape security for a market‑leading cloud banking platform.