Technology Security Specialist

Overview

In this role you will strengthen security for a Windows-heavy estate within a technology-driven trading firm. You will own end-to-end security improvements, from vulnerability management to incident response, and build automation to accelerate security operations. You’ll work closely with infra, dev and security teams to implement resilient controls and repeatable engineering practices. A strong focus on engineering-led security and automation underpins the impact you’ll have on risk reduction.

Responsibilities

• Own technical improvement of security controls across corporate Windows systems
• Manage the vulnerability lifecycle from discovery to remediation and validation
• Support response to suspicious activity, security alerts and production-impacting events
• Tune and extend endpoints capabilities: EDR, application control, encryption, host firewalls, telemetry
• Create reusable PowerShell automation for deployment, investigation and control assurance
• Develop runbooks and repeatable engineering practices from operational knowledge

Key requirements

• Five or more years delivering security or operations engineering in Windows-heavy environments
• Detailed knowledge of Active Directory, Group Policy and native Windows protection features
• Ability to recognise common attack paths against Windows infrastructure and design mitigations
• Experience triaging incidents and using monitoring, event data and logs to determine what happened
• Previous responsibility for deploying or operating endpoint security tools at scale
• Strong PowerShell scripting skills and an automation-first approach
• Clear communication and judgement to work with infrastructure, development and security specialists

• clear communication
• collaboration
• problem-solving
• Active Directory
• Group Policy
• Windows protection features

…