Lead Security Engineer

We are looking to recruit an exceptional Security Engineer and are willing to pay an annual compensation of £250k-£300k and a loaded benefits package for a great candidate! Please read the advert before applying

Security shouldn't slow engineering down. It should enable it. We're looking for an exceptional Security Engineer to help secure the technology platform behind one of the world's leading investment firms. This is a hands-on engineering role where you'll work across cloud, identity, endpoints and infrastructure to build security that is automated, scalable and secure by design.

You'll work at the heart of our Infrastructure Engineering team—not hidden away in a traditional security function—partnering with Platform, Network and Cloud Engineers to embed security into everything we build. This role is fully hands-on, and we expect a prolific engineer who is dedicated to engineering excellence to fill this position.

This is a chance to shape the future of security in a modern, cloud-first environment where engineering excellence matters, automation is expected, and continuous improvement is part of the culture.

What You'll Own

This isn't a ticket-driven SOC role.

You'll become one of the firm's lead specialists, helping protect a global technology platform spanning:

• Hybrid cloud infrastructure across AWS and Azure
• Enterprise identity and access management
• Endpoint security
• Network security
• Modern cloud platforms
• Corporate technology
• Critical trading infrastructure

You'll improve the platform every day—not simply respond when something goes wrong.

Your Mission

Build systems that are:

• Secure by design
• Highly automated
• Cloud native
• Observable
• Practical
• Scalable
• Frictionless for engineers
• Resilient against modern threats
• You'll automate repetitive work.
• You'll reduce operational risk.
• You'll improve detection.
• You'll harden infrastructure.
• You'll raise the security maturity of the entire engineering organisation.

What You'll Be Doing

You'll work across the full security engineering lifecycle, including:

• Designing and continuously improving detection, monitoring and response capabilities across modern SIEM and EDR platforms
• Leading the investigation and technical response to complex security incidents alongside our managed service provider
• Owning vulnerability management—from discovery and risk assessment through to remediation and verification
• Securing endpoints, identities and privileged access using Entra ID, Active Directory, Conditional Access and modern identity controls
• Designing secure cloud environments across AWS and Azure, including IAM, guardrails, logging and secure-by-default architectures
• Hardening endpoints, servers and cloud infrastructure using industry best practices and security baselines
• Building automation using Python, PowerShell and Infrastructure-as-Code to eliminate manual operational work
• Partnering with Infrastructure, Cloud and Network Engineering teams to embed security into every architectural decision
• Leading the charge on complex troubleshooting and technical problem-solving
• Evaluating new security technologies and continuously improving the firm's defensive capabilities
• Developing incident response playbooks, technical documentation and operational standards
• Helping engineers and users alike understand security through practical advice—not fear, uncertainty or bureaucracy

What Great Looks Like

• You're an engineer first. Demonstrably passionate about technology and security
• Security is your specialism. Deep expertise, both high and low level
• You enjoy building things. Dedicated to engineering excellence
• You automate anything. Ideally you code and script yourself and don't rely on vendor products
• You understand risk but avoid unnecessary complexity.
• You care about and have genuine experience creating secure platforms, rather than simply enforcing policy.

You'll bring experience in:

• Deep Security Engineering expertise (Infrastructure, Cyber, Info, Cloud)
• SIEM and EDR platforms
• Identity security including Entra ID, Active Directory and Conditional Access
• AWS and/or Azure security architecture
• IAM, logging, guardrails and cloud-native security controls
• Vulnerability management and risk-based remediation
• Firewalls, segmentation and Zero Trust networking
• Python or PowerShell automation
• Infrastructure-as-Code

Experience within financial services, in particular the buy-side, is highly beneficial, but outstanding engineers from firms renowned for technology innovation and engineering excellence are also interesting. If you've built sophisticated secure platforms where reliability and resilience genuinely mattered, we'd like to hear from you.

Why Join?

Ground-floor opportunity to build security into every layer of a world-class technology platform.

You'll work alongside exceptional Infrastructure, Cloud and Platform Engineers solving complex technical challenges where resilience, security and engineering quality have direct business impact.

You'll have real influence over architecture, tooling and security strategy—not simply operate someone else's platform.

If you're excited by modern cloud security, automation, infrastructure engineering and solving genuinely difficult technical problems, we'd love to talk.