Requirements

• Substantial experience in security engineering within a complex enterprise environment, delivering major initiatives.
• Deep hands-on expertise in areas like identity and access management, privileged access, endpoint security, cloud security, infrastructure hardening, secrets management, PKI, data protection, or detection engineering.
• Strong understanding of Windows and Linux, Active Directory and modern identity platforms, networking, authentication protocols, and hybrid infrastructure.
• Ability to operate at both architecture and implementation levels, explaining design decisions and resolving complex technical issues.
• Strong automation skills using scripting, APIs, infrastructure as code, version control, and delivery pipelines for security changes.
• Experience delivering and operating reliable production services including configuration management, upgrades, monitoring, resilience, and recovery.
• Sound risk judgement and ability to make pragmatic decisions under uncertainty.
• Ability to influence without formal authority, build relationships, and secure agreement with technical and non-technical stakeholders.
• Strong ownership, organisation, and delivery skills, capable of clarifying ambiguous requirements and resolving obstacles.
• Experience mentoring junior engineers, providing technical escalation, incident response, and participating in an on-call environment.

Nice to Haves

• Experience or willingness to learn about quantitative trading, financial services, or environments with demanding availability and performance requirements.
• Experience delivering security services across multiple regions, cloud environments, and data centres, including migration from legacy controls to modern platforms.
• Familiarity with platforms such as Okta or Microsoft Entra ID, Microsoft Defender and Intune, HashiCorp Vault, enterprise PAM solutions, Splunk, and cloud-native security services, or equivalent technologies.

What You'll Be Doing

• Own and drive complex security initiatives from discovery and design through implementation and ongoing operation, coordinating across multiple teams.
• Define and evolve technical architectures and engineering standards for key security capabilities balancing security, reliability, performance, and cost.
• Design, build, and improve controls for identity and privileged access, endpoints, cloud and on-premises infrastructure, data protection, and security monitoring.
• Identify major security weaknesses and attack paths, prioritize remediation, and address root causes of risk.
• Automate deployment, configuration, and operational tasks with APIs, scripting, and infrastructure as code, ensuring repeatability and rollback capabilities.
• Engineer resilient and supportable security services with monitoring, alerting, runbooks, recovery procedures, and clear operational ownership.
• Share responsibility for day-to-day security operations, participate in the on-call rota, and respond to incidents and urgent issues.
• Collaborate with Security, Infrastructure, IT, and development teams to integrate controls, resolve challenges, and drive adoption.
• Provide senior technical leadership during incidents and service failures, lead troubleshooting, contribute to reviews, and ensure corrective actions.
• Mentor junior engineers through coaching, design reviews, and guidance, acting as an escalation point.
• Evaluate vendors and new technologies, define requirements, validate capabilities, and lead integration and operational handover.

Perks and Benefits

• Supportive and collaborative culture focused on innovation and delivering high-quality returns.
• Equal opportunity employer valuing diversity as essential to success.
• Initiatives and programs to promote healthy work-life balance.
• Empowerment to work openly and respectfully to achieve collective success.