Senior Security Engineer - Platform

The Role:

The Security Engineer – Platform is a senior technical role within Apex Group's Security Engineering function, responsible for engineering, operating, and continuously improving the organization's global security platforms and capabilities.

The role owns the implementation, optimization, automation, and operational effectiveness of enterprise security technologies spanning endpoint security, identity and access management, email security, privileged access management, network security, cloud security, vulnerability management, and security monitoring.

The successful candidate will play a critical role in advancing Apex's security maturity, supporting regulatory and audit requirements, enabling secure business growth, and reducing cyber risk across a global technology estate.

This role works closely with Security Architecture, Cloud & Infrastructure Engineering, Identity & Access Governance (IPAM), SOC, and Technology teams to ensure security controls are integrated, scalable, and aligned to Apex's strategic security roadmap.

The position also contributes to major strategic initiatives including Zero Trust adoption, security platform modernization, mergers and acquisitions (M&A) integration activities, cloud transformation programs, CyberArk maturity improvements, Microsoft security platform enablement, and SIEM modernization initiatives.

Key duties and responsibilities:

Security Platform Ownership & Engineering

• Engineer, implement, configure, maintain, and continuously improve enterprise security platforms across the Apex Group estate.

• Act as a technical owner and subject matter expert for designated security technologies and services.

• Drive platform maturity initiatives to improve effectiveness, coverage, automation, resilience, and user experience.

• Develop and maintain platform standards, security baselines, operating procedures, and engineering documentation.

• Ensure security platforms remain aligned to security architecture principles, regulatory requirements, and evolving threat landscapes.

• Identify opportunities to automate operational activities through scripting, APIs, orchestration, and platform integrations.

Enterprise Security Technologies

Provide senior engineering support across technologies including:

• Microsoft Defender Suite (Endpoint, Identity, Cloud Apps, XDR)

• Microsoft Entra ID Security

• IGA/PAM Management tools

• Email Security Platforms (Mimecast, Proofpoint, Tessian or equivalent)

• Network Security & Zero Trust Platforms (Netskope, SWG, CASB, ZTNA/NPA)

• Vulnerability Management Platforms (Qualys or equivalent)

• Cloud Security Posture Management (CSPM) platforms for cloud security visibility, configuration governance, compliance monitoring, and risk reduction

• Data Security Posture Management (DSPM) solutions for data discovery, classification, security monitoring, and data risk management

• Security Ratings & Third-Party Risk Platforms

• SIEM and Security Monitoring Platforms (Exabeam, Sentinel and related technologies)

• Security Awareness and Human Risk Management platforms

Experience and Knowledge:

Essential

• 7+ years of experience in Information Security, Cyber Security, Security Engineering, or related technical security roles.

• Demonstrable experience engineering and operating enterprise-scale security platforms within complex global organizations.

• Strong hands-on experience with Microsoft and third-party security technologies including:

o Microsoft Defender Suite

o Microsoft Entra ID

o CyberArk

o Netskope

o Mimecast, Proofpoint or Tessian

o Qualys

o SIEM and Security Monitoring platforms

• Strong understanding of:

o Zero Trust security models

o Identity and Access Management (IAM)

o Privileged Access Management (PAM)

o Conditional Access

o MFA

o SSO and Identity Federation

o Endpoint Security

o Email Security

o Vulnerability Management

o Security Monitoring & Detection Engineering

o Cloud Security

• Experience supporting Azure, AWS, OCI, and hybrid environments.

• Experience with PowerShell, Python, APIs, automation, or infrastructure-as-code concepts.

• Strong troubleshooting and analytical skills.

• Excellent communication and stakeholder management skills.

Desirable

• Experience supporting M&A integrations, cloud migrations, or enterprise transformation programs.

• Familiarity with security architecture principles and security engineering patterns.

• Exposure to DevSecOps, CI/CD security, infrastructure-as-code, or cloud-native security technologies.

• Experience working in regulated financial services environments.

• Relevant certifications such as: CISSP, CCSP, Microsoft Security Certifications, CyberArk Certifications, etc.

What will you get in return:

• High visibility within a fast‑growing global organization.

• Opportunity to work with a diverse international team of security professionals.

• Exposure to leading security technologies across multiple environments and jurisdictions.

• A role where your contributions directly improve the organization’s security maturity.

• Professional development opportunities, including certifications and hands‑on learning.

• A positive, supportive, and collaborative work environment.

• A unique opportunity to grow within one of the world’s leading independent fund administrators.