Skip to main contentA logo with &quat;the muse&quat; in dark blue text.
Thought Machine

Senior Cloud Security Engineer

London, United Kingdom

Thought Machine's mission is bold - to properly and permanently rid the world's banks of legacy technology. To achieve this, we have developed the foundations of modern banking and built core and payments technology which runs natively in the cloud. What we are attempting is hard and means we need great people working together to build great technology.

We have grown rapidly in the past few years - growing our team to more than 500 individuals across offices in London, New York, Singapore and Sydney. We have raised more than $500m in funding and are now valued at $2.7bn. Our investors include Molten Ventures, Eurazeo, Intesa Sanpaolo, Temasek, Nyca Partners, JPMorgan Chase, Standard Chartered, and more.

We have created a culture enabling our team to produce the best work in the industry, ensuring we have fun along the way. We're regularly cited as having a fantastic workplace culture and have been recognised by Sifted magazine as having one of the highest Glassdoor ratings for a UK fintech company and the most generous employee share package in the industry. We've been named AltFi's B2B Fintech of the Year, placed in the FinTech50, and named one of Europe's fastest-growing companies by the Financial Times in 2023.

Want more jobs like this?

Get Software Engineering jobs in London, United Kingdom delivered to your inbox every week.

By signing up, you agree to our Terms of Service & Privacy Policy.


A Cloud Security Engineer is an individual contributor to the larger Security Engineering team. We desire engineers who are architects and designers, can create solutions (often in code), and think creatively about security challenges and threats. We for a passion for unique solutions and the exploration of unique ideas and perspective that you can bring to a challenge.

The Security Engineering team is a cross-functional team made up of individuals who bring their own unique expertise in either (or both) application security and infrastructure (cloud) security. We allow team members to move from project to project, subject to subject based on their skills, experience, and interests. Each team member brings their own expertise to bear in ways that are collaborative and designed to find the best solutions to complex problems.

The team covers the following areas, and individuals contribute to any of them based on their own expertise:

  • Designs and reviews to build a secure product and platform
  • Threat modelling to identify relevant areas of focus
  • Define the best in class protective and detective security controls
  • Development of automation tooling
  • Implement cutting-edge tooling and measures
  • Code review and assessment to minimise exposures and vulnerabilities

A large part of Thought Machine product security function is a greenfield challenge; we are building the bank of tomorrow with cutting edge technology. To achieve this we need innovative thinking to create security solutions in our products and our infrastructure. We look for people who think outside the box, and outside of traditional silos to find unique solutions and approaches to security that lead the industry.

Duties

  • Provide security expertise and mentorship to Thought Machine engineering teams through the stages of planning, design, and testing of new solutions.
  • Co-develop threat models with engineering teams that identify relevant threats and relevant strategies for mitigation
  • Design and build cloud native preventative and detective controls that operate at scale
  • Build and maintain automation to actively audit and assess infrastructure-as-code and in-place infrastructure
  • Develop (in code) security tooling, contribute to third-party security products, and develop updates for existing tooling that is in use in our environment
  • Work with cloud engineering and operations teams to develop tooling that maintains our secure operating state in production
  • Perform security reviews and security testing
  • Contribute to the overall security strategy, security tooling selection and creation
  • Operate collaboratively with other Thought Machine teams with autonomy, trust, and influence

Requirements

Essential

  • Familiarity with building and deploying containerised applications in public cloud using CI/CD frameworks and infrastructure automation
  • Knowledge of cloud networking architecture, cloud operations, security, automation and orchestration
  • Familiarity with identifying and enumerating security threats and contributing to design reviews
  • Knowledge of security in distributed systems at scale
  • Familiarity with good security practices with containers and Kubernetes
  • Experience with languages such as Go, Python, or other modern programming languages
  • Coding experience in the creation, automation, and integration of security tools
  • Experience in version control systems such as Git
  • Experience with designing, developing, and maintaining security in public cloud environments such as AWS and GCP
  • A desire to collaborate and communicate with team members on projects

Desirable

  • Existing experience building and operating distributed systems at scale
  • Awareness and experience with "well-architected" cloud security frameworks or CSA-CCM
  • Contributions to the security community (public research, blogging, presentations, etc)
  • Experience in performing web application penetration testing and security tooling
  • Experience developing tools and interacting with cloud provider APIs.

Benefits

  • Highly competitive salary
  • Pension plan (match up to 7%)
  • Life insurance - three times annual salary
  • Competitive maternity (6 months fully paid) and paternity leave (4 week fully paid)
  • Shared parental leave (matched to our maternity leave for the same point in time)
  • 25 days holiday and bank holidays
  • Private health insurance with Bupa for you and your family
  • Health cash plan (including dental and optical)
  • Flexible working hours
  • Cycle-to-work scheme
  • Electric car scheme
  • Season ticket loan
  • Access to outstanding learning materials and courses
  • Sports and hobby clubs, subsidised by Thought Machine
  • All the latest tech you need
  • Start the day properly with fresh fruit and cereals
  • Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks
  • A talented and experienced team as your colleagues
  • An environment where we encourage learning and progress
  • Two charity days a year
  • Weekly food pop up

Thought Machine are committed to making a measurable positive impact on people's everyday lives. We are an equal opportunity employer and value diversity at our company. We actively hire for cultural growth. We welcome people of all ages, backgrounds and value people who take a journey unique to them. We provide everyone with equal access to professional development. You are encouraged to apply even if your experience doesn't precisely match the job description.

Client-provided location(s): London, UK
Job ID: Thought_Machine-263
Employment Type: Other

Perks and Benefits

  • Health and Wellness

    • Health Insurance
    • Dental Insurance
    • Vision Insurance
    • Life Insurance
    • Short-Term Disability
  • Work Flexibility

    • Flexible Work Hours
    • Hybrid Work Opportunities
  • Office Life and Perks

    • Casual Dress
    • Snacks
    • Some Meals Provided
  • Vacation and Time Off

    • Personal/Sick Days
    • Paid Vacation
    • Paid Holidays
  • Financial and Retirement

    • Company Equity
    • 401(K) With Company Matching
  • Professional Development

    • Access to Online Courses
    • Lunch and Learns
  • Diversity and Inclusion

    • Diversity, Equity, and Inclusion Program