Application Security Engineer

About the role

This is a full‑time, permanent position based in Lisbon, requiring four days a week onsite. The Application Security Engineer will ensure Thought Machine’s products are built with robust security controls and will lead efforts to minimise vulnerabilities and protect customer data.

Key responsibilities

• Drive improvements to the product security posture through strategic planning and collaboration with development and infrastructure teams.
• Produce web‑scale application security designs and conduct threat modelling for services and products.
• Review and create data‑privacy and financial‑regulatory functional and non‑functional designs.
• Perform vulnerability assessments, security testing and regular code reviews.
• Provide subject‑matter expertise throughout the software development lifecycle and mentor developers on secure coding practices.
• Contribute to security strategy, tooling selection and the creation of custom security tools.

Required profile

• Hands‑on experience with OWASP Top 10 vulnerabilities and DevSecOps practices.
• Strong background in data‑privacy protection and ability to mentor development teams.
• Creative, autonomous and capable of handling multiple projects simultaneously.

Required skills

• Proficiency in at least one programming language such as Python, Go or Java.
• Experience with web application penetration testing and tools like Burp Suite, web/network scanners and static code analysers.
• Knowledge of cloud and container platforms (AWS, GCP, Kubernetes, Docker).
• Ability to automate and integrate security tools through code.
• Expertise in threat modelling, vulnerability assessment and security design reviews.

What we offer

• Highly competitive salary and a voluntary pension plan (match up to 5%).
• Private healthcare, comprehensive life insurance and 25 days of holiday plus public holidays.
• Daily meal allowance, access to learning resources and subsidised sports clubs.
• Modern office environment with a range of snacks, smoothies and drinks.