Senior Infrastructure Security Engineer

Overview

In this role you will strengthen Windows endpoints, identity and across the corporate estate with practical security engineering. You’ll automate security processes using PowerShell and Python, and work with platform teams to embed protections at scale. Expect focus on measurable, maintainable controls, prevention, detection, and timely vulnerability remediation in a high-performance trading environment.

Pay / Benefits

• hybrid work model
• industry-leading compensation
• opportunity to tackle difficult security problems
• collaboration with experienced engineers

Responsibilities

• Engineer safeguards for Windows endpoints, remote-access platforms, and the corporate estate
• Automate security processes with PowerShell, Python, and vendor APIs to reduce repetitive work
• Enhance prevention and detection using application control, host firewalls, audit policy, telemetry, encryption, Microsoft Defender, and exploit protection
• Drive vulnerability remediation by balancing technical severity with operational impact
• Strengthen access and identity controls across Active Directory, Entra ID, Kerberos, privileged accounts, and certificate infrastructure
• Evaluate emerging attack techniques and translate findings into engineering changes
• Collaborate with platform and software teams to ensure protections fit system design and operations

Key requirements

• Explain Windows authentication, logon behavior, access tokens, privileges, UAC and Group Policy in practical terms
• Delivered endpoint controls involving EDR, anti-malware, allowlisting, firewalls, disk encryption, vulnerability tooling or patch management
• Understand TLS, OIDC, PKI, X.509 certificates and least-privilege design
• Distinguish theoretical weaknesses from credible compromise routes and prioritize remediation
• Write reliable production-grade PowerShell
• Python and security product integrations are beneficial
• Strong communication, balanced risk decisions, and ability to push technical work forward within operational constraints

• clear communication
• balanced risk judgment
• ability to work with cross-functional teams
• Windows endpoint security
• EDR / anti-malware / allowlisting
• Host firewalling

…