Junior Security Engineer

Intropic; Greater London; Hybrid; GBP 50,000 - 90,000; Full time

Job summary

Intropic, a London-based financial information company, seeks an IT-focused professional transitioning into security engineering. You will maintain IT operations and build security controls, with growth into threat modelling, incident response, and governance, risk, and compliance.

The role blends IT, security engineering, and GRC in a fast-moving team. You will automate repetitive tasks, manage endpoints, and help safeguard cloud infrastructure across AWS/GCP, while aligning with SOC 2 and

Qualifications

• Solid professional IT experience in desktop support, sysadmin, or endpoint management.
• Hands-on experience with Jamf and Git in a professional setting.
• Basic scripting ability in Python or Bash.
• Comfort with macOS and Windows administration.
• Familiar with how networks, identity, and access control work.
• Experience using AI tools in your workflow.
• A genuine interest in security as a career, with readiness to train.
• _patience and courtesy with end users; essential for the role._
• High attention to detail; offboarding done securely is critical.

Responsibilities

• Run IT onboarding and offboarding and automate the process.
• Manage ~100 endpoints with Jamf and Intune (macOS + Windows).
• Be the first responder for colleague IT and access questions.
• Administer core SaaS estate including Google Workspace and GitLab; script repetitive tasks.
• Contribute to security engineering and GRC tasks as the role grows.
• Support security operations, including data protection and access controls.

Skills

IT experience

Scripting (Python/Bash)

macOS administration

Windows administration

Networking & IAM

AI tools usage

Security interest

End user support

Detail-oriented

Tools

Jamf

Git

Intune

Google Workspace

GitLab

Job description

Who We Are

Intropic is a financial information and software company operating at the cutting edge of global capital markets. We pair modern technology (elastic cloud infrastructure and agentic AI systems) with deep market expertise to build information products that the world's most sophisticated financial institutions rely on every day. Our clients include hedge funds, proprietary trading firms, index fund managers, large asset managers, sovereign wealth funds, and investment banks, who use our products to generate alpha, manage risk, and make better decisions in fast-moving markets. We're best known for our Index Rebalance Forecast products, and we're now extending that edge into several other strategies. Headquartered in London's Canary Wharf and expanding globally, we're a team that moves fast, takes real ownership, and holds itself to a high standard of rigour and integrity.

The Role

You will keep the day-to-day of Intropic's security and IT running, and build the systems that secure it further. Colleagues rely on the IT you run. Our SOC 2 relies on the evidence you keep clean. Where the work repeats, you build it away.

This role is built for someone with solid IT experience who wants to move into security. You already know how to run an estate: laptops, accounts, SaaS apps, and access paths. Here you'll put that knowledge to work on the security side, because you cannot write a good detection or a useful guardrail without knowing what normal looks like. The role is a mix of IT, security engineering, and GRC, and it is an engineering role throughout. Anything you find yourself doing twice by hand is a candidate for automation, and you will have the tools and the mandate to build it. As you grow, the security engineering side of the role grows with you.

This is a genuine route from IT into security engineering, at a company small enough that you will build things that matter from week one. It suits a fast learner who is excited by solving difficult problems.

What You Will Do

Security Engineering - 40%

• Assist in engineering the security of our cloud infrastructure across AWS and GCP, from individual EC2 instances to a large EKS microservice estate.
• Assist in building new detections. Expand coverage where we're blind and cut the noise where we're not.
• Assist in threat modelling new products and services before they ship, and embed security checks directly into CI/CD.
• Assist with incident response, gathering evidence and running containment steps.
• Build tooling that improves how we work, from enrichment scripts to integrations between our security systems.
• Help build the guardrails around our AI agent usage (Claude Code and similar) as we work out what good looks like.

IT - 40%

• Run onboarding and offboarding for joiners and leavers, and build the automation that makes both fast and complete.
• Manage our fleet of roughly 100 endpoints through Jamf and Intune (about 90% macOS, 10% Windows): enrolment, patching, configuration profiles, and compliance.
• Be the first responder for colleague IT and access questions, and resolve them quickly and courteously.
• Administer our core SaaS estate, including Google Workspace and GitLab access, and script away the repetitive parts.

GRC - 20%

• Keep our SOC 2 evidence current in Drata. Chase down failing monitors and automate evidence collection wherever possible.
• Help prepare for the yearly Type II audit and the annual pentest.
• Maintain security policies and track exceptions.

What You Need

• Solid professional experience in IT. Desktop support, sysadmin, or endpoint management.
• Hands on experience with Jamf and Git in a professional settings
• Basic scripting ability in Python or Bash
• Comfort with macOS and Windows administration
• Familiarity with how networks, identity, and access control work.
• Experience using AI tools in your own workflow
• A genuine interest in security as a career. We will invest in training you, and we want that investment to land.
• Patience and courtesy with end users. A large part of this job is helping colleagues, and doing it well earns the trust that makes the security work possible.
• High attention to detail. Offboarding done sloppily is a security incident waiting to happen.

Nice to Have

• Exposure to Intune.
• Exposure to AWS or any cloud platform.
• Personal projects, a home lab, CTF experience, or security certifications in progress (Security+ or similar).
• Familiarity with SOC 2 or any compliance framework.