Senior Application Security Engineer

About the role

Thought Machine is building the next‑generation banking platform in the cloud. As a Senior Application Security Engineer you will lead the effort to protect our core and payments products from security risks, influencing design, implementation and audit readiness across the organisation.

Key responsibilities

• Drive improvements to the product security posture through strategic planning and collaboration with development and infrastructure teams.
• Produce production‑grade application security designs and perform threat modelling, design reviews and vulnerability assessments.
• Review and create data‑privacy and financial‑regulatory functional and non‑functional designs.
• Provide subject‑matter expertise throughout the software development lifecycle, including code reviews and security testing.
• Contribute to security strategy, tooling selection and creation, and automate security tooling where possible.

Required profile

• Strong experience with a programming language such as Python, Go or Java.
• Hands‑on security experience in a DevOps environment, including web‑application penetration testing.
• Knowledge of security in distributed systems at scale and cloud/container platforms (AWS, GCP, Kubernetes, Docker).
• Proven ability to perform security design reviews, threat modelling and risk assessments.
• Familiarity with OWASP Top 10 vulnerabilities and data‑privacy protection.

Required skills

• Python
• Go
• Java
• Burp Suite (proxy)
• Web/Network scanners
• Static code analysis tools
• AWS
• GCP
• Kubernetes
• Docker
• DevSecOps
• OWASP Top 10
• Threat modelling
• Vulnerability assessment

What we offer

• Highly competitive salary (€75K‑€95K per year)
• Voluntary pension plan (match up to 5%)
• Private healthcare and comprehensive life insurance
• 25 days holiday plus public holidays and two charity days
• Daily meal allowance and access to a wide range of snacks and drinks
• Learning budget, courses and outstanding technical resources
• Sports and hobby clubs subsidised by the company