Cyber Security Engineer

We are partnering with a highly successful investment management firm seeking a Security Engineer to join a small, technically strong security team responsible for protecting critical trading, research, and corporate technology environments.

This is an opportunity to work in a fast-paced hedge fund where security is viewed as a business enabler rather than a compliance function. You will have exposure across infrastructure, cloud, applications, endpoints, and software engineering teams, helping to build and mature security capabilities that directly support investment operations.

The role offers significant breadth, ownership, and visibility, making it ideal for an engineer who enjoys solving complex security challenges across multiple domains.

What You’ll Be Doing

• Protect and secure Windows and Linux environments across corporate and production infrastructure
• Enhance endpoint security controls, monitoring, detection, and response capabilities
• Help design, implement, and maintain cloud security controls across Azure and other cloud environments
• Partner with software engineers to embed security throughout the Software Development Life Cycle (SDLC)
• Drive Application Security initiatives including secure code reviews, threat modelling, and vulnerability remediation
• Build and improve DevSecOps capabilities within CI/CD pipelines
• Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking
• Support incident response investigations and security monitoring activities
• Develop security automation to improve operational efficiency and reduce risk
• Contribute to security architecture reviews and technology assessments
• Work closely with engineering, infrastructure, quant, and investment technology teams to ensure security is integrated into business-critical systems

Essential Experience

• Strong hands-on experience securing Windows and Linux environments
• Experience with endpoint security technologies including EDR/XDR platforms
• Knowledge of cloud security principles and controls, ideally within Azure
• Experience with application security testing and secure development practices
• Strong understanding of vulnerability management frameworks and tooling
• Experience implementing security controls within CI/CD pipelines
• Knowledge of DevSecOps principles and security automation
• Familiarity with authentication, identity management, network security, and encryption technologies
• Experience investigating security incidents and responding to threats
• Strong scripting or automation skills using Python, PowerShell, Bash, or similar

Nice to Have

• Experience within financial services, hedge funds, asset management, or trading environments
• Knowledge of container and Kubernetes security
• Experience with infrastructure-as-code security
• Familiarity with Microsoft security technologies including:
• Security certifications such as CISSP, GSEC, OSCP, GIAC, AZ-500, or similar

• Small security team with significant influence and visibility
• Opportunity to work across the full security landscape rather than in a siloed function
• Direct engagement with engineering, platform, and investment technology teams
• Modern technology environment with strong executive support for security
• High degree of ownership and autonomy

Competitive compensation, bonus, and benefits package