> Markdown version of [/jobs/ext/2824541-senior-security-engineer-cloud-first-hedge-fund-scale-up-london](https://www.wearedevelopers.com/jobs/ext/2824541-senior-security-engineer-cloud-first-hedge-fund-scale-up-london). Every page supports `.md` or `Accept: text/markdown`. Links point to the HTML versions so they work for humans too. Agent guide: [/agents.md](https://www.wearedevelopers.com/agents.md).

---

# Senior Security Engineer - Cloud-First Hedge Fund Scale-Up (London)

- **Company:** Winston Fox
- **Location:** Greater London, UK
- **Experience:** Expert
- **Contract:** Permanent contract
- **Skills:** Active Directory, Amazon Web Services, Microsoft Azure, Cloud Computing, Cloud Computing Security, Cyber Security, Identity and Access Management, Python (Programming Language), Network Security, Performance Tuning, Windows PowerShell, Cloud Services, Zero Trust Network Access, Web Application Security, Security Information and Event Management, Systems Integration, Software Vulnerability Management, Data Logging, Scripting, Cloud Platform System, Firewalls (Computer Science), Network Server
- **Published:** September 10, 2026
- **Apply:** https://www.collegerecruiter.com/job/2840590930-senior-security-engineer--cloud-first-hedge-fund-scale-up-london

## About the Role

* 7+ years in Security Engineering, Security Operations or a similar Infrastructure role, ideally within Financial Services.
 * Hands-on SIEM/EDR experience: alert triage, investigation, tuning and detection logic.
 * Strong understanding of identity and endpoint security: Conditional Access, Entra ID / Active Directory security controls, Teleport, device compliance/posture management.
 * Experience with Cloud Security across AWS and/or Azure: IAM, guardrails, logging and secure configuration.
 * Practical Vulnerability Management experience: scanning, risk-based prioritisation and remediation tracking.
 * Working knowledge of Network Security Principles: Firewalls, segmentation, ZTNA/secure web gateway.
 * Solid understanding of SOC 2 and NIST controls, evidence and audit support.
 * Scripting/automation skills: Python and/or PowerShell, plus familiarity with Infrastructure-as-Code.
 * Certifications such as CISSP, CISM, AZ-500, SC-300/SC-400, or equivalent preferred.

## Description

Senior Security Engineer sought by a fast-growing Multi-Strategy Hedge Fund business. This is a relatively Greenfield environment in a world-class business which is scaling quickly, with extensive opportunities for interesting, cutting-edge projects.

Our client is a relatively recent Hedge Fund start-up, now managing $5BN+ requiring someone who can work well with both the business as well as with MSPs, operate with a high degree of accountability, able to manage multiple concurrent projects efficiently and flexibility, whilst also collaborating effectively with a global team across multiple time zones. The ideal candidate is a strong technologist with a generalist mindset-comfortable wearing multiple hats, adapting quickly, and delivering in a high-pressure environment. An especially interesting feature of this opportunity is that they have various MSPs carrying out the standard project work, therefore this team take on the most challenging and strategic projects!

This is a broad and generalist Security Specialist role as part of a Core Infrastructure Engineering team, blending hands-on Security Engineering - Monitoring, Detection, Vulnerability Management and Hardening - with Secure-by-Design partnership across the team, working closely with the business as well as with an MSP who undertake the more generic project work and support. The role therefore requires a broad skillset spanning SIEM/EDR, Identity & EndPoint Security, Cloud Security (AWS and/or Azure), Vulnerability Management, SOC 2 and NIST Controls, and Automation using Python/PowerShell/IaC.

Key responsibilities include the design, implementation and tuning of Security Monitoring, Detection and Response capabilities (SIEM/EDR), integrating commercial tools and developing custom detections where needed. You will also own Vulnerability Management; administering and optimising Endpoint and Network Security Controls; Implementing and maintaining hardening standards across Endpoints, Servers and Cloud workloads; and developing Automation for Security Operations and Infrastructure. All while partnering with Network, Cloud Platform and other teams to embed Security into Architecture and Platform Engineering decisions. You will also own the Cloud Security posture across AWS and/or Azure, including IAM, Guardrails, Logging, and secure configuration of Core Services, while developing Automation for Security Operations and Infrastructure.


## Related Videos

- [JavaScript? No. Java Scripts! - Scripting with Java](https://www.wearedevelopers.com/videos/2094-javascript-no-java-scripts-scripting-with-java)
- [Crypto-secure Data Management with In-Database Blockchain](https://www.wearedevelopers.com/videos/632-crypto-secure-data-management-with-in-database-blockchain)
- [Kubernetes Security - Challenge and Opportunity](https://www.wearedevelopers.com/videos/412-kubernetes-security-challenge-and-opportunity)
- [Security Pitfalls for Software Engineers](https://www.wearedevelopers.com/videos/726-security-pitfalls-for-software-engineers)
- [Intermediate Bitcoin Script](https://www.wearedevelopers.com/videos/25-intermediate-bitcoin-script)
- [You can’t hack what you can’t see](https://www.wearedevelopers.com/videos/41-you-can-t-hack-what-you-can-t-see)

## Related Articles

- [9 Ways to Make Money Hacking](https://www.wearedevelopers.com/magazine/333-9-ways-to-make-money-hacking)
- [Best Companies to work for in London: Top 25 Companies in 2023](https://www.wearedevelopers.com/magazine/187-best-companies-to-work-for-in-london-top-25-companies-in-2023)
- [What Are The Top Skills Required For Azure Developers?](https://www.wearedevelopers.com/magazine/77-what-are-the-top-skills-required-for-azure-developers)
- [Software Engineer Salary London](https://www.wearedevelopers.com/magazine/252-software-engineer-salary-london)
- [Why Upskilling And Reskilling is Important For Developers](https://www.wearedevelopers.com/magazine/428-why-upskilling-and-reskilling-is-important-for-developers)
- [Events like RSAC Get You CISOs. Developers Decide What Actually Gets Deployed.](https://www.wearedevelopers.com/magazine/693-events-like-rsac-get-you-cisos-developers-decide-what-actually-gets-deployed)