Cyber Security Engineer
Huxley · London, England ·
Cyber Security Engineer
</br>
Hedge Fund | Small, High-Impact Security Team | London
</br>
We are partnering with a highly successful investment management firm seeking a Security Engineer to join a small, technically strong security team responsible for protecting critical trading, research, and corporate technology environments.
</br>
This is an opportunity to work in a fast-paced hedge fund where security is viewed as a business enabler rather than a compliance function. You will have exposure across infrastructure, cloud, applications, endpoints, and software engineering teams, helping to build and mature security capabilities that directly support investment operations.
</br>
The role offers significant breadth, ownership, and visibility, making it ideal for an engineer who enjoys solving complex security challenges across multiple domains.
</br>
What You'll Be Doing
</br>
- </br>
- Protect and secure Windows and Linux environments across corporate and production infrastructure
- </br>
- Enhance endpoint security controls, monitoring, detection, and response capabilities
- </br>
- Help design, implement, and maintain cloud security controls across Azure and other cloud environments
- </br>
- Partner with software engineers to embed security throughout the Software Development Life Cycle (SDLC)
- </br>
- Drive Application Security initiatives including secure code reviews, threat modelling, and vulnerability remediation
- </br>
- Build and improve DevSecOps capabilities within CI/CD pipelines
- </br>
- Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking
- </br>
- Support incident response investigations and security monitoring activities
- </br>
- Develop security automation to improve operational efficiency and reduce risk
- </br>
- Contribute to security architecture reviews and technology assessments
- </br>
- Work closely with engineering, infrastructure, quant, and investment technology teams to ensure security is integrated into business-critical systems
- </br>
</br>
What We're Looking For
</br>
Essential Experience
</br>
- </br>
- Strong hands-on experience securing Windows and Linux environments
- </br>
- Experience with endpoint security technologies including EDR/XDR platforms
- </br>
- Knowledge of cloud security principles and controls, ideally within Azure
- </br>
- Experience with application security testing and secure development practices
- </br>
- Strong understanding of vulnerability management frameworks and tooling
- </br>
- Experience implementing security controls within CI/CD pipelines
- </br>
- Knowledge of DevSecOps principles and security automation
- </br>
- Familiarity with authentication, identity management, network security, and encryption technologies
- </br>
- Experience investigating security incidents and responding to threats
- </br>
- Strong scripting or automation skills using Python, PowerShell, Bash, or similar
- </br>
</br>
Nice to Have
</br>
- </br>
- Experience within financial services, hedge funds, asset management, or trading environments
- </br>
- Knowledge of container and Kubernetes security
- </br>
- Experience with infrastructure-as-code security
- </br>
- Familiarity with Microsoft security technologies including:
- </br>
- Security certifications such as CISSP, GSEC, OSCP, GIAC, AZ-500, or similar
- </br>
</br>
Why Join?
</br>
- </br>
- Small security team with significant influence and visibility
- </br>
- Opportunity to work across the full security landscape rather than in a siloed function
- </br>
- Direct engagement with engineering, platform, and investment technology teams
- </br>
- Modern technology environment with strong executive support for security
- </br>
- High degree of ownership and autonomy
- </br>
</br>
Competitive compensation, bonus, and benefits package
</br>
If you're a hands-on Security Engineer who enjoys operating across infrastructure, cloud, application security, and secure software delivery, this is an opportunity to make a tangible impact within a sophisticated investment organisation where technology and security are central to business success.