Security Engineer
Job Description
[Up to c. £225k Comp Package | Hybrid Working - 4 Days in Office]
Role Overview
We’re representing a technology-led quantitative trading firm looking to add a Security Engineer to its London Information Security function. The organisation operates a substantial global technology estate supporting research and automated trading, creating security problems that require engineering rather than purely process-led solutions.
This is a hands-on position for somebody relatively early in their security career who is already comfortable writing software and reasoning about complex systems. You will work closely with software and infrastructure engineers to identify weaknesses, turn security signals into useful defensive capability, and build controls that reduce the opportunities available to an attacker. The remit is intentionally broad. You could move between detection engineering, authentication and authorisation, security tooling and infrastructure protection, taking work from initial problem definition through architecture, prototyping and production implementation...
Role Snapshot
- 2-4 years' professional information-security experience, ideally in a security engineering, software security, offensive security or similarly technical environment
- Strong programming ability in at least one statically typed language, with the capability to build maintainable production software rather than relying solely on scripts or security tools
- Work primarily within a Go-based engineering environment, alongside Python for scripting and automation - prior commercial Go experience is useful but not required
- Take security problems through requirements gathering, technical design, prototyping, implementation and ongoing improvement
- Partner directly with software engineers to uncover security weaknesses and develop practical technical controls rather than simply documenting risk
- Develop and improve detection capability by turning events, telemetry and security signals into actionable information
- Contribute to authentication, authorisation and defence-in-depth controls designed to constrain compromise and make lateral movement harder
- Apply both defensive and attacker-oriented thinking, with a strong understanding of how operating systems, applications and infrastructure behave beneath the tooling layer
- Work autonomously across varied security projects, with some exposure to third-party security and regulatory activity while remaining firmly engineering-led
- (Preferred) Evidence of technical curiosity outside day-to-day employment, such as demonstrable projects, CTF participation or a practical security qualification such as OSCP
...
Apply for this role
All fields marked with * are required.