Requirements

Expertise with a programming language (e.g. Python, Go or Java)
Experience of security in a DevOps environment
Experience in web application penetration testing and security tooling (e.g. Burp proxy, Web/Network Scanners, Static code analysers, etc)
Coding experience for automating/integrating security tools and creation of security tools
Knowledge of security in distributed systems at scale
Cloud and containers technology knowledge (e.g. AWS, GCP, Kubernetes, Docker)
Experience of performing security design reviews, threat modelling and risk assessments
Knowledge of application security issues

Desirable

Professional security qualifications are desirable (e.g. CISSP, Offensive Security, SANS Institute, etc.)
Contributions to the security community (public research, blogging, presentations, etc)
Awareness and experience of the Data Protection Act, ISO 27001 and PCI-DSS

Drive improvements to Thought Machines product security posture through strategic planning and collaboration with both development and infrastructure teams, with trust, autonomy and influence
Produce production web scale grade application security design
Review and produce data privacy and financial regulatory functional and nonfunctional designs
Perform design reviews and Threat modeling of Thought Machine services and products
Perform vulnerability assessments and security testing
Providing subject matter expertise on all areas of security and privacy throughout the Software Development lifecycle
Liaison with development teams for design, code reviews & education
To contribute to security strategy, security tooling selection and creation
Conduct regular security assessments and code reviews