Information Security Operations Engineer

Information Security Operations Engineer

CTC is a cutting‑edge proprietary trading firm committed to helping the world price and manage risk. Our culture promotes collaboration, innovation, and ethical excellence.

Ready to make an immediate impact at the heart of cybersecurity? Join CTC as an Information Security Operations Engineer, where you will be on the front lines defending our systems. This is live, fast‑paced work that goes beyond screen monitoring—investigating real threats, collaborating with passionate pros, and sharpening your instincts.

• Monitor and triage alerts across security platforms such as SIEM, EDR, email, and identity, cutting through noise to initiate investigations.
• Execute and improve incident response playbooks, gathering evidence, containing low‑severity events, escalating thoughtfully, and communicating clearly.
• Perform daily security checks to ensure healthy systems, track issues through closure, and keep runbooks updated.
• Support phishing investigations and user‑reported security events, sharing findings to keep teams protected.
• Assist with vulnerability and patch reviews alongside engineering, confirming that risks are remediated.
• Create detailed case documentation with timelines, artifacts, observables, and post‑incident summaries to support learning.
• Suggest and build improvements for processes and playbooks, tuning detections and developing smart automations.
• Collaborate with technology partners across the firm, sharing context and building trust through fast, reliable service.
• Help teammates thrive, reduce repetitive work, improve signal‑to‑noise, and deliver consistent results.

• Genuine interest in cybersecurity operations and a drive to build a career in SOC or incident response. Internships, school projects, or labs are welcome.
• Basic understanding of networking, Windows and Linux systems, and enterprise technology. Able to dig into logs and troubleshoot issues.
• Familiarity with at least one core security tool or domain—SIEM, EDR, email security gateways, or identity and MFA—and readiness to learn more.
• Strong instincts for structured troubleshooting, evidence gathering, and clear documentation for tickets and incident handoffs.
• Basic scripting or automation skills in Python or Power Shell, or a willingness to learn and automate repetitive tasks.
• Curiosity, clear communication, and a collaborative mindset.
• Detail‑oriented and service‑driven with a disciplined approach to procedures, meeting SLAs, and seeking ways to improve outcomes.
• Willingness to join on‑call or after‑hours rotations as needed.

• Hands‑on experience with security platforms such as SIEM queries, endpoint detections, phishing analysis, or sandboxing.
• Familiarity with ticketing tools, incident tracking, or on‑call workflows, and exposure to SOAR or automation tools.
• Coursework, certifications, or labs in security operations—e.g., Security+, Splunk fundamentals, or networking basics.
• Understanding of vulnerability management and experience working with engineering teams on remediation.

Salary Range: $150,000—$175,000 USD. This role is also eligible for an annual discretionary bonus, dependent on skills, experience, qualifications, and firm performance.

Most teams at CTC, with the exception of Trading, follow a hybrid workplace model, subject to change based on business need.

We strongly believe in the well‑being of our employees and their families, offering generous medical coverage, paid parental leave, free breakfast and lunch (plus healthy snacks), wellness reimbursement, quarterly recharge days, and a variety of other benefits focused on providing the best employee experience.

Disclaimer: interns and contractors are not eligible for benefits at CTC.

Entry level

Full‑time

Information Technology

At CTC, we aim to cultivate a workplace that celebrates diversity and ensures each person feels included, engaged, and empowered. We are a proud equal‑opportunity employer. CTC does not discriminate on the basis of race, religion, color, national origin, sex, gender, gender expression, sexual orientation, age, marital status, veteran status, or disability status. We will provide reasonable accommodation to individuals with disabilities to participate in the job application or interview process and to perform crucial job functions.

Information submitted by applicants may be subject to review and analysis by automated systems, including AI, as part of the recruitment process. These systems are utilized to enhance the efficiency and effectiveness of our hiring procedures. Applicants are advised that any information provided may be evaluated by AI tools to ensure an equitable and thorough assessment.