Lead Security Engineer

Security shouldn't slow engineering down. It should enable it.

We're looking for an exceptional Security Engineer to help secure the technology platform behind one of the world's leading investment firms. This is a hands‑on engineering role where you'll work across cloud, identity, endpoints and infrastructure to build security that is automated, scalable and secure by design.

You'll work at the heart of our Infrastructure Engineering team—not hidden away in a traditional security function—partnering with Platform, Network and Cloud Engineers to embed security into everything we build.

This is a chance to shape the future of security in a modern, cloud-first environment where engineering excellence matters, automation is expected, and continuous improvement is part of the culture.

This isn't a ticket-driven SOC role.

You'll become one of the firm's senior technical security specialists, helping protect a global technology platform spanning:

• Hybrid cloud infrastructure across AWS and Azure
• Enterprise identity and access management
• Network security
• Corporate technology
• Critical trading infrastructure

You’ll improve the platform every day—not simply respond when something goes wrong.

Build systems that are:

• Secure by design
• Highly automated
• Observable
• Practical
• Scalable
• Frictionless for engineers
• Resilient against modern threats
• You’ll automate repetitive work.
• You’ll reduce operational risk.
• You’ll raise the security maturity of the entire engineering organization.

You'll work across the full security engineering lifecycle, including:

• Designing and continuously improving detection, monitoring and response capabilities across modern SIEM and EDR platforms
• Leading the investigation and technical response to complex security incidents alongside our managed service provider
• Owning vulnerability management—from discovery and risk assessment through to remediation and verification
• Securing endpoints, identities and privileged access using Entra , Active Directory, Conditional Access and modern identity controls
• Designing secure cloud environments across AWS and Azure, including IAM, guardrails, logging and secure‑by‑default architectures
• Hardening endpoints, servers and cloud infrastructure using industry best practices and security baselines
• Building automation using Python, Power Shell and Infrastructure-as-Code to eliminate manual operational work
• Partnering with Infrastructure, Cloud and Network Engineering teams to embed security into every architectural decision
• Evaluating new security technologies and continuously improving the firm's defensive capabilities
• Developing incident response playbooks, technical documentation and operational standards
• Helping engineers and users alike understand security through practical advice—not fear, uncertainty or bureaucracy

You’re an engineer first.

Security happens to be your specialism.

You enjoy building things.

You automate anything repetitive.

You understand risk but avoid unnecessary complexity.

You care about creating secure platforms rather than simply enforcing policy.

You’ll bring experience in:

• Security Engineering, Infrastructure Security or Security Operations
• SIEM and EDR platforms
• Identity security including Entra , Active Directory and Conditional Access
• AWS and/or Azure security architecture
• IAM, logging, guardrails and cloud-native security controls
• Vulnerability management and risk-based remediation
• Firewalls, segmentation and Zero Trust networking
• Python or Power Shell automation
• Infrastructure-as-Code

Experience with in financial services is beneficial, but outstanding engineers come from many industries. If you've built secure platforms where reliability and resilience genuinely mattered, we'd like to hear from you.

You’ll stand out if you've worked with technologies including:

• Wiz
• Tenable
• Teleport
• AWS Security Hub
• Microsoft Sentinel
• Penetration testing and remediation
• SOC 2, FCA or SEC regulated environments

Certifications such as CISSP, CISM, AZ‑500 or Microsoft Security certifications are welcomed but never a substitute for strong engineering ability and experience.

This is a chance to move beyond operational security and help build security into every layer of a world‑class technology platform.

You’ll work alongside exceptional Infrastructure, Cloud and Platform Engineers solving complex technical challenges where resilience, security and engineering quality have direct business impact.

You’ll have real influence over architecture, tooling and security strategy—not simply operate someone else’s platform.

If you’re excited by modern cloud security, automation, infrastructure engineering and solving genuinely difficult technical problems, we’d love to talk.