Senior Security Engineer

Description

The company is a global quantitative and systematic investment manager trading across all liquid asset classes, using data, technology and scientific methods.

The role is a senior individual contributor position owning complex security challenges across the company's global environment, combining hands-on engineering, technical leadership, mentoring and operational work.

Responsibilities

• Take security initiatives from discovery and design through delivery and ongoing operation, coordinating dependencies across teams and regions.
• Set technical direction and engineering standards, weighing security against reliability, performance and operational cost.
• Build and improve controls for identity and privileged access, endpoints, cloud and on-premises infrastructure, data protection and security monitoring.
• Find security weaknesses and attack paths, rank them by business impact and deliver practical fixes.
• Automate deployment and operations using APIs, scripting and infrastructure as code, with proper testing and rollback procedures.
• Build resilient, supportable services with effective monitoring, runbooks and recovery procedures, and share responsibility for maintenance, support and troubleshooting.
• Take part in the security on-call rota, responding outside normal working hours as required. Lead complex incident troubleshooting and follow up on corrective actions.
• Work with Security, Infrastructure, IT and development teams to integrate controls and drive adoption. Test technologies before evaluating them and hand them over to operations successfully.
• Coach junior engineers through mentoring and design reviews, and act as the senior technical escalation point.

Requirements

• Substantial security engineering experience in complex enterprise environments, including owning major initiatives that span multiple teams.
• Deep practical expertise in several security domains such as identity, privileged access, endpoint or cloud security, infrastructure hardening, secrets management, PKI, data protection or detection engineering.
• Strong understanding of Windows, Linux, Active Directory, modern identity platforms, networking, authentication and hybrid infrastructure.
• Ability to work at both architecture and implementation level, with strong automation skills and experience using version control and delivery pipelines.
• Experience running reliable production services, covering upgrades, configuration management, monitoring, resilience and recovery.
• Sound risk judgement, clear communication, and the ability to influence stakeholders, resolve dependencies and deliver when requirements are unclear.
• Experience mentoring engineers and giving senior technical support during incidents and in on-call settings.
• Desirable: experience or a willingness to learn in quantitative trading, financial services or other environments with demanding availability and performance requirements.
• Desirable: experience or a willingness to learn in security services spanning multiple regions, clouds and data centres, including migration from legacy platforms.

Conditions

Equal opportunity employer; the company values diversity.

Benefits

• Initiatives and programmes that support a healthy work-life balance.