Infrastructure Security Engineer

Jane Street; Greater London; On-site; GBP 100,000 - 140,000; Full time

Job summary

Jane Street is seeking an Infrastructure Security Engineer to design and implement cross‑platform security controls across global IT platforms. You will automate security workflows with PowerShell and Python, integrate security products via APIs, and guide remediation efforts with strong engineering judgment.

Expect to build scalable security practices, investigate threats, and advance vulnerability management across three continents as part of a dedicated IT Engineering team.

Qualifications

• Proficient in securing Windows OS platforms.
• Hands-on experience with integrated security technologies for Windows, including app control, host-based firewalls, auditing, and disk encryption.
• Experience administering endpoint security and vulnerability management solutions (antivirus, anti-malware, EDR, vulnerability scanning, patching).
• Knowledge of security best practices (OS hardening, PAM, vulnerability mitigation).
• Understanding of common threat techniques (TTPs) and countermeasures.
• Familiarity with Windows core infra (AD/EntraID, PKI).
• Desire to automate security practices through scripting and tooling.
• Experience with security tooling and APIs.

Responsibilities

• Design, implement and document strategic security controls across IT platforms.
• Coordinate and deliver security solutions while automating workflows.
• Secure internal IT and remote platforms through hands-on work and security influence.
• Build scalable security controls, investigate threats and drive vulnerability programs.
• Develop security tooling and integrate security products via APIs.

Skills

Windows security

Automation

PowerShell scripting

Python scripting

Security tooling & APIs

Vulnerability management

EDR

Threat Intel / TTPs

AD/EntraID / PKI

Automation of workflows

Tools

PowerShell

Python

Job description

We are looking for an Infrastructure Security Engineer with a strong cross platform engineering background and practical exposure to modern platform security controls to help our global team secure Jane Street’s IT platforms. In this role, you’ll need strong judgement and discerning taste to prioritise potentially complex and extensive remediation efforts. You'll help decide where we focus our resources, providing technical advice and making decisions on behalf of the group where needed. We're looking for builders: people who spend their time writing code and automation (e.g. PowerShell modules, Python) and integrating security products via their APIs, rather than primarily configuring and operating the tools themselves.

In this role, you will proactively propose, design, test, implement and document strategic security controls. You will coordinate and deliver security solutions across our IT platforms while identifying opportunities to further automate intelligent workflows. You will help secure internal IT and remote working platforms through a combination of hands‑on technical work, consultancy and security influence to the wider IT team. This role will encompass a range of responsibilities, including building security controls that scale, investigating emerging threats, developing new security tooling and driving vulnerability management initiatives.

This position sits within our IT Engineering group, a highly dedicated team of engineers who monitor and manage our environment across a physical/virtual computing landscape that spans three continents. Your analytical thinking and expertise will be invaluable as we support the daily work of our colleagues and keep our systems operating at the highest standard.

About You

• Proficient in securing Windows OS platforms and resolving complex technical issues in a fast-moving environment
• Have hands-on experience utilising integrated security technologies for safeguarding Windows operating systems, including application control, host-based firewalls, auditing and event monitoring and disk encryption
• Skilled in administering endpoint security and vulnerability management solutions, including antivirus, anti-malware, EDR, vulnerability scanning and patch management
• Knowledgeable about security best practices, including operating system hardening, privileged access management and vulnerability mitigation
• Understand common threat tactics, techniques and procedures (TTPs) and effective countermeasures
• Well-versed in Windows core infrastructure services (AD/EntraID, PKI)
• Eager to produce scalable and repeatable security practices through automation
• Understand security tooling and APIs
• Flexible, reliable and highly collaborative
• Proven experience automating workflows in PowerShell or other scripting languages

Infrastructure Security Engineer London, GB