Senior Application Security Engineer

Requirements

• Expertise with a programming language (e.g. Python, Go or Java)
• Experience of security in a DevOps environment
• Experience in web application penetration testing and security tooling (e.g. Burp proxy, Web/Network Scanners, Static code analysers, etc)
• Coding experience for automating/integrating security tools and creation of security tools
• Knowledge of security in distributed systems at scale
• Cloud and containers technology knowledge (e.g. AWS, GCP, Kubernetes, Docker)
• Experience of performing security design reviews, threat modelling, and risk assessments
• Knowledge of application security issues

Desirable

• Professional security qualifications are desirable (e.g. CISSP, Offensive Security, Sans Institute, etc.)
• Contributions to the security community (public research, blogging, presentations, etc)
• Awareness and experience of the Data Protection Act, ISO 27001, and PCI-DSS

What You'll Be Doing

• Drive improvements to Thought Machine's product security posture through strategic planning and collaboration with both development and infrastructure teams, with trust, autonomy, and influence
• Produce production web scale grade application security design
• Review and produce data privacy and financial regulatory functional and nonfunctional designs
• Perform design reviews and Threat modeling of Thought Machine services and products
• Perform vulnerability assessments and security testing
• Providing subject matter expertise on all areas of security and privacy throughout the Software Development lifecycle
• Liaison with development teams for design, code reviews & education
• To contribute to security strategy, security tooling selection, and creation
• Conduct regular security assessments and code reviews

Benefits

• Highly competitive salary
• Voluntary Pension Plan (match up to 5%)
• Private Healthcare Insurance
• Comprehensive Life Insurance
• 25 days holiday plus public holidays
• Two charity days a year
• Daily Meal Allowance
• Access to outstanding learning materials and courses
• Sports and hobby clubs, subsidized by Thought Machine
• All the latest tech you need
• Huge range of healthy (and not-so-healthy) snacks, smoothies, and drinks
• A talented and experienced team as your colleagues
• An environment where we encourage learning and progress