Skip to content
CV Rocket
Get started
How it worksThe enginePricingBlogContactSign in

Open nowPosted 33 days ago

Senior Security Control Engineer

Thought Machine39 open roles

Pay
€75,000 – €95,000 a year
Where
Portugal, Lisbon
Work mode
Hybrid
Get the CV for this job

From $25 per CV, paid once. No subscription.

Your applicationOpen nowSenior Security Control EngineerThought Machine · Portugal, Lisbon

  1. YouYes, apply to this one.

  2. CV RocketCV written for this posting.

  3. 25 readersRecruiter, hiring manager, skeptic. Round after round.

  4. CV RocketApplied on Thought Machine's own form.

The reply lands in your private mailbox

3×more interviews than doing it yourself with ChatGPT.

The clock on this job

Early applications get read.

12.3% of postings close within 7 days. Measured by our own scanner across the market. Thought Machine postings stay open a median of 6 days.

Share of postings closed within
  1. 2.1%1 day
  2. 4.5%3 days
  3. 12.3%7 days
  4. 19.7%14 days
  5. 35.6%30 days
  6. 58.0%60 days
This job: posted 33 days ago

Thought Machine median: 6 days open

The posting

Thought Machine's mission is bold – to properly and permanently rid the world's banks of legacy technology. To achieve this, we have developed the foundations of modern banking through core and payments technology which run natively in the cloud. What we are attempting is hard and means we need great people working together to build great technology.

We have grown rapidly in the past few years – growing our team to more than 550 individuals across offices in London, New York, Singapore, Sydney and our newly established Engineering Hub in Lisbon. We have raised more than £500m in funding and our investors include Molten Ventures, Eurazeo, Intesa Sanpaolo, Temasek, Nyca Partners, JPMorgan Chase Strategic Investments, Standard Chartered Ventures, and more.

We have created a culture that enables our team to produce the best work in the industry while ensuring we have fun along the way. We're regularly cited as having a fantastic workplace culture and have been recognised by Sifted magazine as having one of the highest Glassdoor ratings for a UK fintech company and the industry's most generous employee share package. Named one of the world's most innovative fintechs by Global Finance Magazine, we were also recognised by the Financial Times as one of Europe's fastest-growing companies for two consecutive years—and a UK Best Employer for 2026.

This is a full-time, permanent position based in our Lisbon office, requiring three days a week onsite.

Thought Machine is in search of a Senior Security Control Engineer with experience in evaluating threats and risks in an organisation, evaluating control requirements, and using that information to design and implement technical and operational solutions to address them.

Thought Machine prides itself in being an engineering-led company and as such, the candidate should have a strong technical background; they should be able to reason about complex security problems in distributed cloud-based and on-premise computing environments. They should be able to communicate and collaborate on trade-offs between differing approaches to security controls - both internally and to our client base, where necessary.

Thought Machine’s Security Control Engineering team uses Thought Machine’s standards and risk assessments along with client and regulatory requirements to define the security control needs and develops those controls - inclusive of engineering the solution, documenting it, and presenting it to clients and auditors. This focus is to ensure Thought Machine is able to meet its contractual requirements, security and business continuity certifications, and maintaining a program of continuous improvement that puts us at the forefront of industry good practices.

This focus is driven by four principles:

1. Creativity: we are a company filled with unique thinkers, who design and engineer solutions to hard problems in ways that are unique and challenge convention.

2. Collaborative: we believe in collaboration with every team across the company to mitigate identified risks in ways that support Thought Machine’s ways of working and solving hard problems.

3. Quantification: we believe that quantification and measurement is critical to being able to provide evidence-based recommendations for risk mitigation and prioritisation to the company.

4. Continuous Improvement: Monitoring and nurturing the evolution and operation of our ISMS and BCMS so that we remain at the forefront of industry best practices, evolve as threats evolve, and build world-class technologies.

DUTIES:

1. Control Design and Implementation: Actively participate in the technical and operational design and implementation of capabilities, tools, and procedures to mitigate security and business continuity risks to acceptable levels. Provide both process and technical domain expertise in Thought Machine’s approach to its product and operational security as well as business continuity and disaster recovery plans.

2. Continuous Control Assurance: Developing and implementing highly effective ways (tools, processes) of performing continuous audits, and also obtaining the evidence necessary for the renewal of Thought Machine's certifications, including ISO27001, ISO22301, PCI-DSS, and SOC 2 Type 2. This also includes the design of capabilities, tools, and procedures that satisfy the requirements of these regimens.

3. Client Support: Respond directly to client queries regarding our technical approach to security in our products by communicating the technical details necessary to instil confidence in our security posture. Develop materials for distribution and presentation to clients that communicate our approach to security ensuring the materials used are technically accurate, sufficiently detailed, and up-to-date.

4. ISMS and BCMS: Actively ensuring that our approach to security and business continuity is kept up to date; that new threats, technical advances, and new standards are incorporated in a timely manner; our standards, controls, and plans up to date with Thought Machine and client needs, as well as changes to Thought Machine’s processes and technology stack.

REQUIREMENTS

Essential:

- Experience designing and implementing technical solutions to deliver security controls and capabilities in cloud-based infrastructure (e.g. AWS, GCP).

- Experience in working directly with software engineering teams in designing new technical solutions to meet security requirements in products.

- Experience with control automation via code (e.g. Python, Go)

- Strong technical background, with experience in distributed systems, cloud security, and related technologies, and a passion for finding creative solutions to difficult problems.

- Knowledge of threat modelling for the purposes of understanding threat probabilities and frequency.

- Excellent communication skills with an ability to translate technical and security jargon into business-relevant insights.

- Ability to collaborate effectively with other departments and external stakeholders.

Desirable:

- Experience in a fast-paced tech environment or fintech sector.

- Knowledge of container security, Kubernetes, Kafka, and other emergent technologies.

- Experience with obtaining and maintaining a security certification such as SOC 2, ISO 27001, PCI-DSS.

- Proficiency in leading security risk assessments, preferably with knowledge of the FAIR framework

Benefits

- Highly competitive salary

- Voluntary Pension Plan (match up to 5%)

- Private Healthcare Insurance

- Comprehensive Life Insurance

- 25 days holiday plus public holidays

- Two charity days a year

- Daily Meal Allowance

- Access to outstanding learning materials and courses

- Sports and hobby clubs, subsidised by Thought Machine

- All the latest tech you need

- Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks

- A talented and experienced team as your colleagues

- An environment where we encourage learning and progress

We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds, providing everyone with equal access to professional development. You are encouraged to apply even if your experience doesn't accurately match the job description. We also encourage applications from those with different abilities, including candidates with ADHD, autism, dyslexia or dyspraxia.

From $25, paid onceGet the CV for this job

What happens when you press

One press. We do the rest.

  1. A CV for this posting

    Written against Thought Machine's own wording, from every piece of relevant proof in your profile.

  2. 25 readers review it

    Recruiter, hiring manager, skeptic and more read every draft, round after round. You get the best round.

    The review screen in CV Rocket: how each CV was read, round by round.

  3. We apply on Thought Machine's form

    Our application engine gets through the hardest forms there are. Where a question needs you, AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

    An application in CV Rocket: every answer filled in on the employer's form.

  4. Every reply, sorted

    Thought Machine's answer lands in your private mailbox, and we classify it on arrival: interview, question, rejection.

    The CV Rocket inbox: each employer reply classified as an interview, an action or a rejection.

  5. Reply with AI

    AI helps you write the email, checks it and sends it. We show you whether the recruiter read it.

  6. The interview in your calendar

    Full integration with your calendar. The invitation goes straight in.

    An interview invitation in the CV Rocket inbox, added to the candidate's calendar.
Get the CV for this job

From $25 per CV, paid once. No subscription.

Why it works

3×

more interviews than doing it yourself with ChatGPT.

ChatGPT writes a CV and never learns what happened to it. We see every reply. For each CV we know:

  • How it was written, and how the review scored it
  • When we applied, and how long after the posting went up
  • Which posting, which company, which city
  • Who got the interview, and who heard nothing

That is how we know which CVs get called.

Get the CV for this job

From $25 per CV, paid once. No subscription.

The numbers game

More applications. More interviews.

Every application goes out with its own CV, written for that posting and paid once. Send enough of them and the law of large numbers finds you the job.

Get the CV for this job
By hand5–10
With CV Rocket100
applications a day

Nearby

Live postings like this one

Same employer first, then the same role elsewhere.

Before you press

Straight answers

Get the CV for this job

From $25 per CV, paid once. No subscription.

What if my background isn't good enough?

We make the most of the background you have. The CV uses every piece of relevant proof your profile holds, and one of the 25 readers reads your whole profile and flags what the CV left out.

Do you really apply for me?

Yes, on the employer's own form, the hardest ones included. Where a question needs you, you answer it right there and AI suggests the best answer. Don't want us applying from our IP addresses? Use our Chrome extension: we apply straight from your own browser.

Is it a subscription?

No. You pay once per CV, from $25. Every application goes out with its own CV, written for that posting.

One job. One CV.
Paid once.

Pick the posting you want. We write for it, apply for you and catch the reply.

Get the CV for this job

From $25 per CV, paid once. No subscription.