Junior Security Engineer

Intropic; City Of London; On-site; GBP 55,000 - 90,000; Full time

Job summary

Intropic, a London-based financial information and software company, seeks a Security Engineer who can evolve from IT operations into security engineering. You will run the day-to-day IT tasks and build systems that strengthen security, with a focus on SOC 2 evidence, guardrails for AI usage, and automation to reduce manual work.

In this hybrid role, you will manage cloud security across AWS/GCP, handle endpoint management, and support IT and GRC activities while growing into a fuller security

Qualifications

• Solid IT professional experience including desktop support, sysadmin, or endpoint management.
• Hands-on experience with Jamf and Git in a professional setting.
• Basic scripting ability in Python or Bash.
• Comfort with macOS and Windows administration.
• Familiarity with how networks, identity, and access control work.
• Experience using AI tools in your own workflow.
• A genuine interest in security as a career and willingness to be trained.
• Patience and courtesy with end users; high attention to detail.

Responsibilities

• Security Engineering - assist in securing our cloud infrastructure (AWS/GCP) from EC2 to a large EKS estate.
• Build detections and CI/CD security checks; reduce noise and expand coverage.
• Collaborate on threat modelling for new products and embed security checks into pipelines.
• Assist incident response; gather evidence and coordinate containment steps.
• Develop tooling to automate security workflows and integrations between security systems.
• Help build guardrails around AI usage (Claude Code and similar).
• IT operations - onboarding/offboarding automation; manage ~100 endpoints via Jamf and Intune (macOS ~90%, Windows ~10%).
• Respond to colleague IT and access questions; resolve quickly and courteously.
• Administer core SaaS estate (Google Workspace, GitLab access); script repetitive tasks.
• GRC - keep SOC 2 evidence current in Drata; support annual audit and pentest; maintain security policies and track exceptions.

Skills

IT experience

Scripting

IAM basics

macOS admin

Windows admin

Security interest

AI tools

Tools

Jamf

Git

Job description

Who We Are

Intropic is a financial information and software company operating at the cutting edge of global capital markets. We pair modern technology (elastic cloud infrastructure and agentic AI systems) with deep market expertise to build information products that the world's most sophisticated financial institutions rely on every day. Our clients include hedge funds, proprietary trading firms, index fund managers, large asset managers, sovereign wealth funds, and investment banks, who use our products to generate alpha, manage risk, and make better decisions in fast-moving markets. We're best known for our Index Rebalance Forecast products, and we're now extending that edge into several other strategies. Headquartered in London's Canary Wharf and expanding globally, we're a team that moves fast, takes real ownership, and holds itself to a high standard of rigour and integrity.

The Role

You will keep the day-to-day of Intropic's security and IT running, and build the systems that secure it further. Colleagues rely on the IT you run. Our SOC 2 relies on the evidence you keep clean. Where the work repeats, you build it away.

This role is built for someone with solid IT experience who wants to move into security. You already know how to run an estate: laptops, accounts, SaaS apps, and access paths. Here you'll put that knowledge to work on the security side, because you cannot write a good detection or a useful guardrail without knowing what normal looks like. The role is a mix of IT, security engineering, and GRC, and it is an engineering role throughout. Anything you find yourself doing twice by hand is a candidate for automation, and you will have the tools and the mandate to build it. As you grow, the security engineering side of the role grows with you.

This is a genuine route from IT into security engineering, at a company small enough that you will build things that matter from week one. It suits a fast learner who is excited by solving difficult problems.

What You Will Do

Security Engineering - 40%

• Assist in engineering the security of our cloud infrastructure across AWS and GCP, from individual EC2 instances to a large EKS microservice estate.
• Assist in building new detections. Expand coverage where we're blind and cut the noise where we're not.
• Assist in threat modelling new products and services before they ship, and embed security checks directly into CI/CD.
• Assist with incident response, gathering evidence and running containment steps.
• Build tooling that improves how we work, from enrichment scripts to integrations between our security systems.
• Help build the guardrails around our AI agent usage (Claude Code and similar) as we work out what good looks like.

IT - 40%

• Run onboarding and offboarding for joiners and leavers, and build the automation that makes both fast and complete.
• Manage our fleet of roughly 100 endpoints through Jamf and Intune (about 90% macOS, 10% Windows): enrolment, patching, configuration profiles, and compliance.
• Be the first responder for colleague IT and access questions, and resolve them quickly and courteously.
• Administer our core SaaS estate, including Google Workspace and GitLab access, and script away the repetitive parts.

GRC - 20%

• Keep our SOC 2 evidence current in Drata. Chase down failing monitors and automate evidence collection wherever possible.
• Help prepare for the yearly Type II audit and the annual pentest.
• Maintain security policies and track exceptions.

What You Need

• Solid professional experience in IT. Desktop support, sysadmin, or endpoint management.
• Hands on experience with Jamf and Git in a professional settings
• Basic scripting ability in Python or Bash
• Comfort with macOS and Windows administration
• Familiarity with how networks, identity, and access control work.
• Experience using AI tools in your own workflow
• A genuine interest in security as a career. We will invest in training you, and we want that investment to land.
• Patience and courtesy with end users. A large part of this job is helping colleagues, and doing it well earns the trust that makes the security work possible.
• High attention to detail. Offboarding done sloppily is a security incident waiting to happen.

Nice to Have

• Exposure to Intune.
• Exposure to AWS or any cloud platform.
• Personal projects, a home lab, CTF experience, or security certifications in progress (Security+ or similar).
• Familiarity with SOC 2 or any compliance framework.