Cyber Security Engineer

Huxley; Greater London; On-site; GBP 90,000 - 120,000; Full time

Job summary

Hedge Fund in London seeks a Cyber Security Engineer to join a small, high‑impact security team protecting critical trading, research, and corporate tech environments. You will work across infrastructure, cloud, applications, endpoints, and software engineering to mature security capabilities that directly support operations.

The role offers broad ownership and visibility, ideal for engineers who enjoy solving complex security challenges across multiple domains with a hands‑on approach and

Qualifications

• Hands-on experience securing Windows and Linux environments.
• Experience with endpoint security technologies and EDR/XDR platforms.
• Knowledge of cloud security principles and Azure controls.
• Experience in application security testing and secure SDLC practices.
• Strong vulnerability management knowledge and tooling.
• Experience embedding security in CI/CD pipelines.
• Familiarity with DevSecOps and security automation.
• Knowledge of authentication, identity management, network security, and encryption.
• Experience investigating security incidents and remediation.
• Strong scripting or automation skills (Python/PowerShell/Bash).

Responsibilities

• Protect Windows and Linux environments across corporate and production infra.
• Enhance endpoint security controls, monitoring, and response.
• Design and maintain cloud security controls across Azure and clouds.
• Embed security across SDLC with software engineers.
• Drive application security initiatives, threat modelling and remediations.
• Develop DevSecOps capabilities within CI/CD pipelines.
• Lead vulnerability management activities and risk remediation.
• Support incident response investigations and monitoring work.
• Develop security automation to improve efficiency and reduce risk.
• Contribute to security architecture reviews and tech assessments.
• Collaborate with engineering, infrastructure, and investment tech teams.

Skills

Windows/Linux security

EDR/XDR

Azure security

Appsec testing

Vulnerability management

CI/CD security

DevSecOps

Identity management

Incident response

Scripting (Python/PowerShell/Bash)

Job description

Cyber Security Engineer

Hedge Fund | Small, High-Impact Security Team | London

We are partnering with a highly successful investment management firm seeking a Security Engineer to join a small, technically strong security team responsible for protecting critical trading, research, and corporate technology environments.

This is an opportunity to work in a fast-paced hedge fund where security is viewed as a business enabler rather than a compliance function. You will have exposure across infrastructure, cloud, applications, endpoints, and software engineering teams, helping to build and mature security capabilities that directly support investment operations.

The role offers significant breadth, ownership, and visibility, making it ideal for an engineer who enjoys solving complex security challenges across multiple domains.

What You'll Be Doing

• Protect and secure Windows and Linux environments across corporate and production infrastructure


• Enhance endpoint security controls, monitoring, detection, and response capabilities


• Help design, implement, and maintain cloud security controls across Azure and other cloud environments


• Partner with software engineers to embed security throughout the Software Development Life Cycle (SDLC)


• Drive Application Security initiatives including secure code reviews, threat modelling, and vulnerability remediation


• Build and improve DevSecOps capabilities within CI/CD pipelines


• Lead vulnerability management activities, including scanning, prioritisation, risk assessment, and remediation tracking


• Support incident response investigations and security monitoring activities


• Develop security automation to improve operational efficiency and reduce risk


• Contribute to security architecture reviews and technology assessments


• Work closely with engineering, infrastructure, quant, and investment technology teams to ensure security is integrated into business-critical systems

What We're Looking For

Essential Experience

• Strong hands-on experience securing Windows and Linux environments


• Experience with endpoint security technologies including EDR/XDR platforms


• Knowledge of cloud security principles and controls, ideally within Azure


• Experience with application security testing and secure development practices


• Strong understanding of vulnerability management frameworks and tooling


• Experience implementing security controls within CI/CD pipelines


• Knowledge of DevSecOps principles and security automation


• Familiarity with authentication, identity management, network security, and encryption technologies


• Experience investigating security incidents and responding to threats


• Strong scripting or automation skills using Python, PowerShell, Bash, or similar

Nice to Have

• Experience within financial services, hedge funds, asset management, or trading environments


• Knowledge of container and Kubernetes security


• Experience with infrastructure-as-code security


• Familiarity with Microsoft security technologies including:


• Security certifications such as CISSP, GSEC, OSCP, GIAC, AZ-500, or similar

Why Join?

• Small security team with significant influence and visibility


• Opportunity to work across the full security landscape rather than in a siloed function


• Direct engagement with engineering, platform, and investment technology teams


• Modern technology environment with strong executive support for security


• High degree of ownership and autonomy

Competitive compensation, bonus, and benefits package

If you're a hands-on Security Engineer who enjoys operating across infrastructure, cloud, application security, and secure software delivery, this is an opportunity to make a tangible impact within a sophisticated investment organisation where technology and security are central to business success.