Security Engineer

We are seeking a motivated, hands‑on Security Engineer to join our security team. In this role, you will help protect, monitor, and continuously improve the security of our global systems — including cloud (AWS and M365) and on‑premises infrastructure. You’ll play a central part in risk mitigation, incident response, automation of security operations, and embedding security best practices across our organization.

As a Security Engineer at Optiver, you’ll be responsible for monitoring, protecting, and continuously improving the security of our global systems and infrastructure. At Optiver, this means proactive threat prevention, swift identification of security risks, and rapid response to incidents to ensure our systems remain secure under all circumstances. An engineering mindset, attention to detail, and a preference for pragmatic solutions are essential to keeping our systems operating.

• Monitor daily security operations, identify threats, investigate alerts, and respond to incidents across cloud and on‑prem environments.

• Maintain and tune security tools across AWS, Microsoft 365, endpoints, and network infrastructure.

• Strengthen Microsoft 365 and Entra  through Conditional Access, MFA, PIM, Defender for Endpoint/Identity/O365, and tenant configuration hardening.

• Implement and support data protection capabilities, including Microsoft Purview, sensitivity labels, DLP, and insider risk policies.

• Build and maintain security automation using Python and Power Shell, with a strong focus on reducing manual processes and improving detection and response.

• Integrate systems using APIs (Graph API, REST, etc) to enhance security workflows.

• Work with AI and our AI engineering teams to ensure the security of the environment.

• Perform vulnerability assessments, review system configurations, and develop practical mitigation strategies.

• Conduct security reviews of systems, cloud workloads, and new technologies.

• Ensuring and assuring our security controls are effective and working as intended.

• Lead or contribute to incident response activities including investigation, containment, communication, and remediation.

• Analyze logs, IOCs, and behavior patterns using SIEM tools and threat intelligence.

• Work closely with engineering, technology, and business teams to embed security best practices.

• Provide guidance on secure architecture, access controls, and identity management.

• Support user education and uplift security behaviors across the business.

You’ll join a culture of collaboration and excellence, surrounded by curious thinkers and creative problem‑solvers. Motivated by a passion for continuous improvement, you’ll thrive in a supportive, high‑performing environment alongside talented colleagues, collectively tackling some of the toughest challenges in the financial markets.

• The opportunity to work alongside best‑in‑class professionals from over 40 different countries.

• Highly competitive compensation package including performance‑based bonus structure.

• 401(k) match up to 50%.

• Comprehensive health, mental, dental, vision, disability, and life coverage.

• 25 paid vacation days alongside market holidays.

• Extensive office perks, including breakfast, lunch and snacks, regular social events, clubs, sporting leagues and more.

You are a hands‑on security engineer with strong technical fundamentals and a passion for building secure, scalable systems. You may come from a background in Security Engineering, Security Operations, Cloud Security, Identity & Access Management, Dev Sec Ops , or a related field.

You likely bring experience in several of the following areas:

• Securing and supporting cloud environments, particularly AWS, including services such as IAM, Guard Duty, Cloud Trail, Security Hub, AWS Config, and KMS.
• Working with Microsoft security technologies including Entra , Conditional Access, Multi‑Factor Authentication (MFA), Privileged Identity Management (PIM), Microsoft Defender, and Secure Score.
• Using security tools such…