Security Control Engineer

Thought Machine is in search of a Security Control Engineer with experience in evaluating threats and risks in an organisation, evaluating control requirements, and using that information to design and implement technical and operational solutions to address them. This is a full-time, permanent position based in the Lisbon office, requiring three days a week onsite.

Responsibilities

Control Design and Implementation: Actively participate in the technical and operational design and implementation of capabilities, tools, and procedures to mitigate security and business continuity risks to acceptable levels; Continuous Control Assurance: Developing and implementing highly effective ways (tools, processes) of performing continuous audits, and obtaining the evidence necessary for the renewal of certifications including ISO27001, ISO22301, PCI-DSS, and SOC 2 Type 2; Client Support: Respond directly to client queries regarding the technical approach to security in products and develop materials for clients that communicate the approach to security; ISMS and BCMS: Actively ensure that the approach to security and business continuity is kept up to date with new threats, technical advances, new standards, and changes to processes and technology stack

Requirements

Experience designing and implementing technical solutions to deliver security controls and capabilities in cloud-based infrastructure (e.g. AWS, GCP); Experience in working directly with software engineering teams in designing new technical solutions to meet security requirements in products; Experience with control automation via code (e.g. Python, Go); Strong technical background, with experience in distributed systems, cloud security, and related technologies, and a passion for finding creative solutions to difficult problems; Knowledge of threat modelling for the purposes of understanding threat probabilities and frequency; Excellent communication skills with an ability to translate technical and security jargon into business-relevant insights; Ability to collaborate effectively with other departments and external stakeholders

Nice to have

Experience in a fast-paced tech environment or fintech sector; Knowledge of container security, Kubernetes, Kafka, and other emergent technologies; Experience with obtaining and maintaining a security certification such as SOC 2, ISO 27001, PCI-DSS; Proficiency in leading security risk assessments, preferably with knowledge of the FAIR framework

Benefits

Highly competitive salary; Voluntary Pension Plan (match up to 5%); Private Healthcare Insurance; Comprehensive Life Insurance; 25 days holiday plus public holidays; Two charity days a year; Daily Meal Allowance; Access to outstanding learning materials and courses; Sports and hobby clubs, subsidised by Thought Machine; All the latest tech you need; Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks; A talented and experienced team as your colleagues; An environment where we encourage learning and progress