Senior Security Control Engineer

免费注册后解锁"你的匹配分 vs 高分画像"与个人技能缺口。

Thought Machine's mission is bold – to properly and permanently rid the world's banks of legacy technology. To achieve this, we have developed the foundations of modern banking through core and payments technology which run natively in the cloud. What we are attempting is hard and means we need great people working together to build great technology.

We have grown rapidly in the past few years – growing our team to more than 550 individuals across offices in London, New York, Singapore, Sydney and our newly established Engineering Hub in Lisbon. We have raised more than £500m in funding and our investors include Molten Ventures, Eurazeo, Intesa Sanpaolo, Temasek, Nyca Partners, JPMorgan Chase Strategic Investments, Standard Chartered Ventures, and more.

We have created a culture that enables our team to produce the best work in the industry while ensuring we have fun along the way. We're regularly cited as having a fantastic workplace culture and have been recognised by Sifted magazine as having one of the highest Glassdoor ratings for a UK fintech company and the industry's most generous employee share package. Named one of the world's most innovative fintechs by Global Finance Magazine, we were also recognised by the Financial Times as one of Europe's fastest-growing companies for two consecutive years—and a UK Best Employer for 2026.

This is a full-time, permanent position based in our Lisbon office, requiring four days a week onsite.

Thought Machine is in search of a Senior Security Control Engineer with experience in evaluating threats and risks in an organisation, evaluating control requirements, and using that information to design and implement technical and operational solutions to address them.

Thought Machine prides itself in being an engineering-led company and as such, the candidate should have a strong technical background; they should be able to reason about complex security problems in distributed cloud-based and on-premise computing environments. They should be able to communicate and collaborate on trade-offs between differing approaches to security controls - both internally and to our client base, where necessary.

Thought Machine’s Security Control Engineering team uses Thought Machine’s standards and risk assessments along with client and regulatory requirements to define the security control needs and develops those controls - inclusive of engineering the solution, documenting it, and presenting it to clients and auditors. This focus is to ensure Thought Machine is able to meet its contractual requirements, security and business continuity certifications, and maintaining a program of continuous improvement that puts us at the forefront of industry good practices.

This focus is driven by four principles:

1. Creativity: we are a company filled with unique thinkers, who design and engineer solutions to hard problems in ways that are unique and challenge convention.

2. Collaborative: we believe in collaboration with every team across the company to mitigate identified risks in ways that support Thought Machine’s ways of working and solving hard problems.

3. Quantification: we believe that quantification and measurement is critical to being able to provide evidence-based recommendations for risk mitigation and prioritisation to the company.

4. Continuous Improvement: Monitoring and nurturing the evolution and operation of our ISMS and BCMS so that we remain at the forefront of industry best practices, evolve as threats evolve, and build world-class technologies.

DUTIES:

1. Control Design and Implementation: Actively participate in the technical and operational design and implementation of capabilities, tools, and procedures to mitigate security and business continuity risks to acceptable levels. Provide both process and technical domain expertise in Thought Machine’s approach to its product and operational security as well as business continuity and disaster recovery plans.

2. Continuous Control Assurance: Developing and implementing highly effective ways (tools, processes) of performing continuous audits, and also obtaining the evidence necessary for the renewal of Thought Machine's certifications, including ISO27001, ISO22301, PCI-DSS, and SOC 2 Type 2. This also includes the design of capabilities, tools, and procedures that satisfy the requirements of these regimens.

3. Client Support: Respond directly to client queries regarding our technical approach to security in our products by communicating the technical details necessary to instil confidence in our security posture. Develop materials for distribution and presentation to clients that communicate our approach to security ensuring the materials used are technically accurate, sufficiently detailed, and up-to-date.

4. ISMS and BCMS: Actively ensuring that our approach to security and business continuity is kept up to date; that new threats, technical advances, and new standards are incorporated in a timely manner; our standards, controls, and plans up to date with Thought Machine and client needs, as well as changes to Thought Machine’s processes and technology stack.

REQUIREMENTS

Essential:

- Experience designing and implementing technical solutions to deliver security controls and capabilities in cloud-based infrastructure (e.g. AWS, GCP).

- Experience in working directly with software engineering teams in designing new technical solutions to meet security requirements in products.

- Experience with control automation via code (e.g. Python, Go)

- Strong technical background, with experience in distributed systems, cloud security, and related technologies, and a passion for finding creative solutions to difficult problems.

- Knowledge of threat modelling for the purposes of understanding threat probabilities and frequency.

- Excellent communication skills with an ability to translate technical and security jargon into business-relevant insights.

- Ability to collaborate effectively with other departments and external stakeholders.

Desirable:

- Experience in a fast-paced tech environment or fintech sector.

- Knowledge of container security, Kubernetes, Kafka, and other emergent technologies.

- Experience with obtaining and maintaining a security certification such as SOC 2, ISO 27001, PCI-DSS.

- Proficiency in leading security risk assessments, preferably with knowledge of the FAIR framework

Benefits

- Highly competitive salary

- Voluntary Pension Plan (match up to 5%)

- Private Healthcare Insurance

- Comprehensive Life Insurance

- 25 days holiday plus public holidays

- Two charity days a year

- Daily Meal Allowance

- Access to outstanding learning materials and courses

- Sports and hobby clubs, subsidised by Thought Machine

- All the latest tech you need

- Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks

- A talented and experienced team as your colleagues

- An environment where we encourage learning and progress

We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds, providing everyone with equal access to professional development. You are encouraged to apply even if your experience doesn't accurately match the job description. We also encourage applications from those with different abilities, including candidates with ADHD, autism, dyslexia or dyspraxia.

Thought Machine的使命宏大——要让全球银行彻底且永久地摆脱遗留技术。为实现这一目标，我们通过原生运行于云端的核心与支付技术，构建了现代银行的基础。我们尝试的事情难度很高，这意味着我们需要优秀的人才携手合作，打造卓越的技术。

过去几年我们发展迅速——团队已扩展至550多人，办公室遍布伦敦、纽约、新加坡、悉尼以及我们新设立的里斯本工程中心。我们已筹集超过5亿英镑资金，投资方包括Molten Ventures、Eurazeo、Intesa Sanpaolo、Temasek、Nyca Partners、JPMorgan Chase Strategic Investments、Standard Chartered Ventures等。

我们营造了一种文化，让团队能够产出业内最佳的工作成果，同时确保过程中充满乐趣。我们经常被赞誉为拥有极佳的工作场所文化，并被Sifted杂志评为英国金融科技公司中Glassdoor评分最高之一，以及业内最慷慨的员工股权方案。我们被《Global Finance》杂志评为全球最具创新力的金融科技公司之一，还连续两年被《金融时报》评为欧洲增长最快的公司之一——并荣获2026年英国最佳雇主。

这是一个全职永久职位，工作地点在我们的里斯本办公室，每周需现场办公四天。

Thought Machine正在寻找一位高级安全控制工程师，要求具备评估组织内威胁和风险、评估控制需求，并利用这些信息设计及实施技术和运营解决方案以应对这些需求的经验。

Thought Machine以工程驱动型公司为傲，因此候选人应具备扎实的技术背景；应能够对分布式云端和本地计算环境中的复杂安全问题进行推理。应能够在安全控制不同方法之间的权衡上进行沟通与协作——包括内部沟通，必要时也包括与客户沟通。

Thought Machine的安全控制工程团队利用Thought Machine的标准和风险评估，结合客户和监管要求，来定义安全控制需求并开发这些控制措施——包括工程化解决方案、编写文档，并向客户和审计师展示。这一重点在于确保Thought Machine能够满足其合同要求、安全和业务连续性认证，并维持持续改进的计划，使我们处于行业良好实践的前沿。

这一重点由四项原则驱动：

1. 创造力：我们是一家充满独特思考者的公司，他们以独特且挑战传统的方式设计和工程化解决难题的方案。

2. 协作：我们相信与公司每个团队协作，以支持Thought Machine工作方式和解决难题的方式缓解已识别的风险。

3. 量化：我们相信量化和测量对于能够为公司提供基于证据的风险缓解和优先级建议至关重要。

4. 持续改进：监控和培育我们的ISMS和BCMS的演进和运营，使我们保持在行业最佳实践的前沿，随着威胁的演变而演进，并构建世界级的技术。

职责：

1. 控制设计与实施：积极参与能力、工具和流程的技术与运营设计及实施，将安全和业务连续性风险缓解至可接受水平。在Thought Machine的产品和运营安全方法以及业务连续性和灾难恢复计划方面，提供流程和技术领域专业知识。

2. 持续控制保证：开发和实施高效的方式（工具、流程）来执行持续审计，并获取Thought Machine认证续期所需的证据，包括ISO27001、ISO22301、PCI-DSS和SOC 2 Type 2。这还包括设计满足这些制度要求的能力、工具和流程。

3. 客户支持：直接回应客户关于我们产品安全技术方法的询问，传达必要的技术细节以建立对我们安全态势的信心。开发用于向客户分发和展示的材料，传达我们的安全方法，确保所用材料技术准确、足够详细且保持最新。

4. ISMS和BCMS：积极确保我们的安全和业务连续性方法保持最新；新威胁、技术进步和新标准及时纳入；我们的标准、控制和计划与Thought Machine及客户需求保持同步，并与Thought Machine流程和技术栈的变化保持同步。

要求

必备：

- 具备设计和实施技术解决方案的经验，以在云基础设施（如AWS、GCP）中交付安全控制和能力。

- 具备直接与软件工程团队合作设计新产品技术解决方案以满足安全要求的经验。

- 具备通过代码实现控制自动化的经验（如Python、Go）

- 扎实的技术背景，具备分布式系统、云安全及相关技术的经验，并对寻找创造性解决方案解决难题充满热情。

- 了解威胁建模，用于理解威胁概率和频率。

- 出色的沟通能力，能够将技术和安全术语转化为与业务相关的洞察。

- 能够与其他部门和外部利益相关者有效协作。

加分项：

- 具备快节奏技术环境或金融科技领域的经验。

- 了解容器安全、Kubernetes、Kafka及其他新兴技术。

- 具备获取和维护安全认证（如SOC 2、ISO 27001、PCI-DSS）的经验。

- 精通主导安全风险评估，最好了解FAIR框架

福利

- 极具竞争力的薪资

- 自愿养老金计划（最高匹配5%）

- 私人医疗保险

- 全面的寿险

- 25天假期加公共假日

- 每年两天慈善日

- 每日餐补

- 使用优秀的学习材料和课程

- 体育和爱好俱乐部，由Thought Machine补贴

- 所需的所有最新技术

- 种类丰富的健康（和不那么健康）零食、冰沙和饮品

- 才华横溢且经验丰富的团队作为您的同事

- 鼓励学习和进步的环境

我们积极聘用在其领域展现技术卓越的候选人，欢迎所有年龄和背景的人，为每个人提供平等的职业发展机会。即使您的经验与职位描述不完全匹配，也鼓励您申请。我们也鼓励不同能力的申请者，包括有ADHD、自闭症、阅读障碍或运动障碍的候选人。

⚑ 岗位信息收录自公开招聘页（ATS 官方），以雇主官网为准