Thought Machine's mission is bold – to properly and permanently rid the world's banks of legacy technology. To achieve this, we

have developed the foundations of modern banking through core and payments technology which run natively in the cloud. What we are

attempting is hard and means we need great people working together to build great technology.

We have grown rapidly in the past few years – growing our team to more than 550 individuals across offices in London, New York,

Singapore, Sydney and our newly established Engineering Hub in Lisbon. We have raised more than £500m in funding and our investors

include Molten Ventures, Eurazeo, Intesa Sanpaolo, Temasek, Nyca Partners, JPMorgan Chase Strategic Investments, Standard

Chartered Ventures, and more.

We have created a culture that enables our team to produce the best work in the industry while ensuring we have fun along the way.

We're regularly cited as having a fantastic workplace culture and have been recognised by Sifted magazine as having one of the

highest Glassdoor ratings for a UK fintech company and the industry's most generous employee share package. Named one of the

world's most innovative fintechs by Global Finance Magazine, we were also recognised by the Financial Times as one of Europe's

fastest-growing companies for two consecutive years—and a UK Best Employer for 2026.

This is a full-time, permanent position based in our Lisbon office, requiring four days a week onsite.

A Senior Cloud Security Engineer is a part of the larger Security Engineering team. We desire engineers who are able to lead the

engineering, design, and delivery of solutions to security problems. We have a passion for exploring unique solutions and sharing

differing perspectives that leads to the development of leading solutions to complex security problems.

The Security Engineering team is cross-functional and made up of diverse people who bring their own unique expertise in either (or

both) application security and infrastructure (cloud) security. We allow team members to move from project to project, subject to

subject based on their skills, experience, and interests. Each team member brings their own expertise to bear in ways that are

collaborative and designed to find the best solutions to complex problems.

The team covers the following areas, and individuals contribute to any of them based on their own expertise:

Designs of secure products and platforms

Reviews of engineering designs, threat models, and coding practices

Threat modelling to identify relevant areas of focus

Define the best in class protective and detective security controls

Development of security tooling and automation

Implement and maintain cutting-edge tools and measures

A large part of the Thought Machine security function is greenfield; we are building the bank of tomorrow with cutting edge

technology. To achieve this we need innovative thinking to create security solutions in our products and our infrastructure. We

look for people who think outside the box, and outside of traditional silos to find unique solutions and approaches to security

that lead the industry.

DUTIES

Provide security expertise and mentorship to Thought Machine engineering teams through the stages of planning, design, and

testing of new solutions.

Lead the design and delivery of cloud native preventative and detective controls that operate at scale

Build and maintain automation to actively audit and assess infrastructure-as-code and in-place infrastructure

Develop (in code) security tooling, contribute to third-party security products, and develop updates for existing tooling that

is in use in our environment

Co-develop threat models with engineering teams that identify relevant threats and relevant strategies for mitigation

Work with cloud engineering and operations teams to develop tooling that maintains our secure operating state in production

Perform security reviews and security testing

Lead complex projects to develop security capabilities, tooling, and functionality.

Contribute to the overall security strategy, security tooling selection and creation

Operate collaboratively with other Thought Machine teams with trust and influence

REQUIREMENTS

Essential

Familiarity with building and deploying containerised applications in public cloud using CI/CD frameworks and infrastructure

automation

Knowledge of cloud networking architecture, cloud operations, security, automation and orchestration

Familiarity with performing security threat modelling and design reviews

Knowledge of security in distributed systems

Familiarity with good security practices with containers and Kubernetes

Experience with languages such as Go, Python, or other modern programming languages

Coding experience in the creation, automation, and integration of security tools

Experience in version control systems such as Git

Experience with designing, developing, and maintaining security in public cloud environments such as AWS and GCP

Ability to lead and encourage good design skills including creative and critical thinking, collaboration, full evaluation of

options, and objective decision making to find a preferred solution.

Strong interpersonal and communication skills to support collaboration with other personnel and teams

Desirable

Existing experience building and operating distributed systems at scale

Awareness and experience with “well-architected” cloud security frameworks or CSA-CCM

Contributions to the security community (public research, blogging, presentations, etc)

Experience in performing penetration testing and security testing

Experience developing tools and interacting with cloud provider API

Benefits

Highly competitive salary

Voluntary Pension Plan (match up to 5%)

Private Healthcare Insurance

Comprehensive Life Insurance

25 days holiday plus public holidays

Two charity days a year

Daily Meal Allowance

Access to outstanding learning materials and courses

Sports and hobby clubs, subsidised by Thought Machine

All the latest tech you need

Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks

A talented and experienced team as your colleagues

An environment where we encourage learning and progress

We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds,

providing everyone with equal access to professional development. You are encouraged to apply even if your experience doesn't

accurately match the job description. We also encourage applications from those with different abilities, including candidates

with ADHD, autism, dyslexia or dyspraxia.

Role

Senior Cloud Security Engineer

Locations

Portugal

Published

July 14

Deadline

August 16

Tags for this job

Python AWS GCP Kubernetes Go Rust CI/CD

Similar Jobs

Senior Application Security Engineer

Thought Machine

Portugal•Posted: Jun 24•Deadline: Aug 16

Thought Machine's mission is bold – to properly and permanently rid the world's banks of legacy technology. To achieve this, we have developed the foundations of modern banking through core and payments technology which run natively in the cloud. What we are attempting is hard and means we need great people working together to build great technology. We have grown rapidly in the past few years – growing our team to more than 550 individuals across offices in London, New York, Singapore, Sydney and our newly established Engineering Hub in Lisbon. We have raised more than £500m in funding and our investors include Molten Ventures, Eurazeo, Intesa Sanpaolo, Temasek, Nyca Partners, JPMorgan Chase Strategic Investments, Standard Chartered Ventures, and more. We have created a culture that enables our team to produce the best work in the industry while ensuring we have fun along the way. We're regularly cited as having a fantastic workplace culture and have been recognised by Sifted magazine as having one of the highest Glassdoor ratings for a UK fintech company and the industry's most generous employee share package. Named one of the world's most innovative fintechs by Global Finance Magazine, we were also recognised by the Financial Times as one of Europe's fastest-growing companies for two consecutive years—and a UK Best Employer for 2026. This is a full-time, permanent position based in our Lisbon office, requiring four days a week onsite. This position plays a key role in ensuring Thought Machine teams are taking all required steps in building a secure product set. You will play a major and leading role in protecting Thought Machine product against security risks, with influence to implement cutting-edge measures to minimise exposures and vulnerabilities. Whether engineering a system to address a technical security hurdle, protecting our customers' data, or consulting on a wide range of security topics, you are empowered to engage and lead cross-functionally. A large part of Thought Machine product security function is a greenfield challenge, we are building the bank of tomorrow with cutting edge web technology, no best-practice/of the shelve security frameworks or tools can solve our security challenge. We are building the best security to enable engineering and impress financial service auditors. Key qualities of the ideal candidate would have experience in OWASP top 10 vulns, devsecOps, data privacy protection, passion to mentor and enable devs, creativity, autonomy, ability to work and complete multiple projects simultaneously. DUTIES * Drive improvements to Thought Machines product security posture through strategic planning and collaboration with both development and infrastructure teams, with trust, autonomy and influence. * Produce production web scale grade application security design. * Review and produce data privacy and financial regulatory functional and nonfunctional designs. * Perform design reviews and Threat modeling of Thought Machine services and products. * Perform vulnerability assessments and security testing. * Providing subject matter expertise on all areas of security and privacy throughout the Software Development lifecycle. * Liaison with development teams for design, code reviews & education. * To contribute to security strategy, security tooling selection and creation. * Conduct regular security assessments and code reviews. REQUIREMENTS Essential * Expertise with a programming language (e.g. Python, Go or Java) * Experience of security in a DevOps environment * Experience in web application penetration testing and security tooling (e.g. Burp proxy, Web/Network Scanners, Static code analysers, etc). * Coding experience for automating/integrating security tools and creation of security tools. * Knowledge of security in distributed systems at scale. * Cloud and containers technology knowledge (e.g. AWS, GCP, Kuberbetes, Docker) * Experience of performing security design reviews, threat modelling and risk assessments * Knowledge of application security issues Desirable * Professional security qualifications are desirable (e.g. CISSP, Offensive Security, Sans Institute, etc.) * Contributions to the security community (public research, blogging, presentations, etc) * Awareness and experience of the Data Protection Act, ISO 27001 and PCI-DSS Benefits * Highly competitive salary * Voluntary Pension Plan (match up to 5%) * Private Healthcare Insurance * Comprehensive Life Insurance * 25 days holiday plus public holidays * Two charity days a year * Daily Meal Allowance * Access to outstanding learning materials and courses * Sports and hobby clubs, subsidised by Thought Machine * All the latest tech you need * Huge range of healthy (and not-so-healthy) snacks, smoothies and drinks * A talented and experienced team as your colleagues * An environment where we encourage learning and progress We actively hire candidates who demonstrate technical excellence in their field and welcome people of all ages and backgrounds, providing everyone with equal access to professional development. You are encouraged to apply even if your experience doesn't accurately match the job description. We also encourage applications from those with different abilities, including candidates with ADHD, autism, dyslexia or dyspraxia.

JavaPythonAWS

Senior Platform Engineer

Bunch

Portugal•Posted: Jun 26•Deadline: Aug 16

bunch is building the backbone of private markets. We are enabling next-gen fund operations with one integrated system that combines secure data infrastructure, AI-powered workflows and expert fund services. If you value ownership, growth through real responsibility, and working with a thoughtful, ambitious team, this role might be for you. YOUR ROLE We are seeking a Senior Platform Engineer to design, build, and maintain the infrastructure and automation that power our applications. In this role, you will combine the speed and reliability focus of DevOps with the architectural depth of Platform Engineering, ensuring that our development teams can deliver high-quality software quickly, securely, and at scale. You will be responsible for designing infrastructure, implementing automation, ensuring platform reliability, and guiding the evolution of our delivery pipelines and cloud environments. This is a highly collaborative position that bridges operations, development, and security. TOP RESPONSIBILITIES * Design, implement, and maintain cloud-based infrastructure (AWS) for scalability, reliability, and security. * Manage infrastructure-as-code using Terraform, or similar tools. * Oversee container orchestration platforms such as Kubernetes. * Ensure robust disaster recovery and high availability strategies. * Build, maintain, and optimize CI/CD pipelines for rapid and reliable deployments. * Automate infrastructure provisioning, configuration management, and application deployments. * Integrate automated testing and security checks into delivery workflows. * Implement logging, alerting, and observability tools to monitor infrastructure and application performance. * Proactively identify and resolve performance bottlenecks, outages, or system health issues. * Collaborate with development teams to troubleshoot and resolve deployment failures. * Ensure infrastructure and delivery processes meet security, compliance, and governance standards. * Apply security patches and updates to infrastructure and platform components. * Partner with software engineers to ensure development aligns with operational best practices. * Lead technical decision-making for infrastructure and platform initiatives. * Mentor junior engineers and promote DevOps best practices across teams. ABOUT YOU * At least 6 years of experience in senior Platform, DevOps, or Infrastructure Engineering roles. * Strong expertise with AWS cloud platform. * Deep knowledge of Kubernetes, Docker, and container orchestration. * Proficiency with infrastructure-as-code (Terraform, etc.). * Experience building and maintaining CI/CD pipelines (GitHub Actions or any similar tool). * Strong understanding of observability tools (Prometheus, Grafana, ELK, Datadog, etc.). * Solid grasp of networking, system administration, and cloud security practices. * Strong problem-solving skills and ability to debug complex issues. * Excellent communication and collaboration abilities. * Experience leading projects and influencing engineering decisions. * Nice to Have: * Background in SRE (Site Reliability Engineering) practices. * Familiarity with compliance frameworks (SOC 2, ISO 27001). * Programming skills in TypeScript, Python or Go. OUR TECH STACK We strive to keep our technology stack as simple and efficient as possible. * Frontend & Backend: TypeScript on both the frontend (Svelte) and the backend (Node.js with Nest.js) * Database: MySQL * Infrastructure: Kubernetes (K8S) on top of AWS * Source Control & CI/CD: GitHub * Third-Party Applications: * FusionAuth for authentication * Retool for low-code internal frontend solutions * Twilio and SendGrid for sending SMS and emails WORKPLACE AND BENEFITS * Become one of the key builders of bunch and architect our go-to-market strategy * Take part in a network of people passionate about investment and work closely with the most interesting players in the private market * Benefit from working with a diverse mix of talents, unrivaled energy, and team spirit within a culture of inclusion * Flexible hours, remote setup * 28 days of vacation per year + 2 company days, on top of public holidays * A competitive compensation package * A great tech and work setup with everything you need WHAT YOUR INTERVIEW JOURNEY WILL LOOK LIKE * First interview with the People team (30 min): get acquainted with the bunch and to understand if what we’re offering is what you’re searching for * Hiring Manager Interview (60 min): this conversation with an Engineering Manager will cover product-focused culture and values, including collaboration, ownership, self-awareness, and quality standards. * Take-home assignment for you to showcase your ability to design and implement reliable infrastructure and platform solutions. We will send a task and give you a few days to work on it (the actual hands-on work should not take more than 3-4 hours). * Technical Interview (60 min): this interview in the form of a technical conversation will focus on discussing your assignment, approaches. * Final Round: Meet our VP of Engineering (45 min) to learn about ways of working, vision for bunch, and team culture. * Meet-and-Greet (Optional - 30 min) to meet a few members of your future cross-functional team. About bunch bunch is building the operating infrastructure for the next generation of private markets. We combine AI-powered automation with deep regulatory expertise to replace fragmented spreadsheets and manual processes with one integrated platform across the fund lifecycle, purpose-built for private markets heading toward $32 trillion in Assets Under Management. We've 4x our ARR in 2025, crossed 150 fund managers and 12,000 LPs on the platform, and just closed our $35M Series B in May 2026. We're looking for ambitious people who want real ownership of hard problems, and who care about building infrastructure that actually matters to the people using it. ____ At bunch, we're committed to an inclusive environment where diversity is valued and celebrated. We provide equal opportunities to all qualified applicants. We process personal data in line with applicable laws (including GDPR). See our Privacy Policy for details on your rights and how to reach us.

PythonNode.jsAWS

Senior Software Engineer - Linux/eBPF

Datadog

Portugal•Posted: Jun 11•Deadline: Aug 16

The eBPF Platform team owns the shared eBPF infrastructure inside the Datadog Agent, and is responsible for its reliability, performance, and evolution across a wide variety of Linux distributions and kernel versions. We build tooling and agent functionality for product teams utilizing eBPF (Network Performance Monitoring, Universal Service Monitoring, Cloud Workload Security, GPU Monitoring), enable new teams exploring eBPF, and centralize deep kernel expertise across the organization. The team contributes to open source projects such as btfhub and cilium/ebpf. Datadog is investing heavily in GPU Monitoring to give customers deep visibility into GPU utilization, health, and performance across their infrastructure. The eBPF Platform team builds the agent-side foundation that makes this possible, from eBPF programs that capture GPU activity at the kernel level, to the metrics pipelines and validation infrastructure that ensure data quality at scale. In this role, you will work at the intersection of eBPF, the Linux kernel, and GPU infrastructure. You'll contribute to GPU Monitoring capabilities within the Datadog Agent while also working across the broader eBPF platform, investigating production incidents, improving reliability, and helping shape the architecture of one of the most widely deployed eBPF solutions in the industry. At Datadog, we place value in our office culture - the relationships and collaboration it builds and the creativity it brings to the table. We operate as a hybrid workplace to ensure our Datadogs can create a work-life harmony that best fits them. What You’ll Do: * Contribute to GPU Monitoring feature development end-to-end, from ideation to implementation within the Datadog Agent * Build and maintain shared eBPF functionality for product teams to use in their eBPF-based products * Investigate and debug complex production issues that span the kernel, eBPF programs, and agent runtime * Research, prototype, develop, and document solutions to hard problems in the eBPF and GPU monitoring space * Provide technical input to product and architecture decisions Who You Are: * You have experience working with and developing in the Linux kernel, either using eBPF, as a kernel developer, or building low level programs in C * You have significant experience building high throughput/low latency systems * You have been building applications and tooling for 5+ years and know the systems you’ve worked on in depth * You are motivated by solving problems for our customers first and foremost and building beautiful products that our customers love * You have ability to work effectively in a team Datadog values people from all walks of life. We understand not everyone will meet all the above qualifications on day one. That's okay. If you’re passionate about technology and want to grow your skills, we encourage you to apply. Benefits and Growth: * New hire stock equity (RSUs) and employee stock purchase plan (ESPP) * Continuous professional development, product training, and career pathing * Intra-departmental mentor and buddy program for in-house networking * An inclusive company culture, ability to join our Community Guilds * Access to Inclusion Talks, our Internal panel discussions * Free, global Spring Health benefits for employees and dependents age 6+ * Competitive global benefits Benefits and Growth listed above may vary based on the country of your employment and the nature of your employment with Datadog. #LI-Remote ---------------------------------------------------------------------------------------------------------------------------------- About Datadog: Datadog is the leading observability and security platform for the AI era, providing businesses with unified visibility across the technology stack to manage complexity at scale. It brings applications, infrastructure, data, models, and security into one place, using AI to detect and resolve issues before they impact customers. Trusted globally by Fortune 500 companies and high-growth AI leaders, Datadog enables businesses to move faster with clarity and confidence. Learn more about #DatadogLife on Instagram, LinkedIn, and Datadog Learning Center. ---------------------------------------------------------------------------------------------------------------------------------- Equal Opportunity at Datadog: Datadog is proud to offer equal employment opportunity to everyone regardless of race, color, ancestry, religion, sex, national origin, sexual orientation, age, citizenship, marital status, disability, gender identity, veteran status, and other characteristics protected by law. We also consider qualified applicants regardless of criminal histories, consistent with legal requirements. Here are our Candidate Legal Notices for your reference. Datadog endeavors to make our Careers Page accessible to all users. If you would like to contact us regarding the accessibility of our website or need assistance completing the application process, please complete this form. This form is for accommodation requests only and cannot be used to inquire about the status of applications. Privacy and AI Guidelines: Any information you submit to Datadog as part of your application will be processed in accordance with Datadog’s Applicant and Candidate Privacy Notice. For information on our AI policy, please visit Interviewing at Datadog AI Guidelines.

Dev Eng