Application Security Engineer

Requirements

• Expertise with a programming language (e.g. Python, Go or Java)
• Experience of security in a DevOps environment
• Experience in web application penetration testing and security tooling (e.g. Burp proxy, Web/Network Scanners, Static code analysers, etc)
• Coding experience for automating/integrating security tools and creation of security tools
• Knowledge of security in distributed systems at scale
• Cloud and containers technology knowledge (e.g. AWS, GCP, Kubernetes, Docker)
• Experience of performing security design reviews, threat modelling and risk assessments
• Knowledge of application security issues

Desirable

• Professional security qualifications are desirable (e.g. CISSP, Offensive Security, Sans Institute, etc.)
• Contributions to the security community (public research, blogging, presentations, etc)
• Awareness and experience of the Data Protection Act, ISO 27001 and PCI-DSS

What You'll Be Doing

• Drive improvements to Thought Machine's product security posture through strategic planning and collaboration
• Produce production web scale grade application security design
• Review and produce data privacy and financial regulatory designs
• Perform design reviews and threat modeling of Thought Machine services and products
• Perform vulnerability assessments and security testing
• Provide subject matter expertise on security and privacy throughout the Software Development lifecycle
• Liaison with development teams for design, code reviews & education
• Contribute to security strategy, security tooling selection and creation
• Conduct regular security assessments and code reviews

Benefits

• Highly competitive salary
• Voluntary Pension Plan (match up to 5%)
• Private Healthcare Insurance
• Comprehensive Life Insurance
• 25 days holiday plus public holidays
• Two charity days a year
• Daily Meal Allowance
• Access to outstanding learning materials and courses
• Sports and hobby clubs, subsidised by Thought Machine
• All the latest tech you need
• Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks
• A talented and experienced team as your colleagues
• An environment where we encourage learning and progress