Principle Windows Security Engineer

Quant Capital; Greater London; Hybrid; GBP 85,000 - 125,000; Full time

Job summary

Quant Capital in London is seeking a Principal IT Security Engineer to own security controls across Windows, endpoints and automation, in a hybrid environment.

You will collaborate with IT teams to implement threat detection, vulnerability management and platform hardening, delivering scalable security outcomes. The role offers ownership and a fast-paced, technically demanding setting.

Qualifications

• Experience designing security controls across Windows platforms.
• Strong focus on vulnerability management and remediation at scale.
• Automation around configuration, monitoring and incident response.
• Knowledge of AD/Entra ID, PKI and networking basics.
• PowerShell programming skills and scripting ability.
• Ability to influence technical decisions and communicate clearly.

Responsibilities

• Designing and implementing security controls across Windows platforms.
• Driving vulnerability management initiatives and remediation at scale.
• Building automation for configuration, monitoring, and incident response.
• Improving endpoint security with EDR, AV, patching and OS hardening.
• Collaborating with core infrastructure and identity teams (AD/Entra ID, PKI).
• Investigating threats and advising on technical risk for global teams.

Skills

Windows security

Endpoint protection

PowerShell

Active Directory

Entra ID

PKI

OS hardening

Vulnerability management

Automation

Job description

Principle IT Security Engineer – Windows, Automation, Endpoint Security

London – Hybrid

Industry Leading Compensation

Quant Capital is partnered with a leading trading firm looking to hire an IT Security Engineer to strengthen their global security posture. This role sits inside a high-performing engineering group and suits someone who can own technical decisions, cut through noise, and build security controls that scale.

You’ll work across Windows engineering, endpoint security, automation, vulnerability management and platform hardening. Expect a mix of hands-on engineering, advisory work, and proactive threat mitigation. The environment is fast-moving and technically demanding - you’ll be the person the wider IT team turns to for sound judgement and clarity.

What you’ll be doing

• Designing and implementing security controls across Windows platforms
• Driving vulnerability management initiatives and closing out remediation at scale
• Building automation around configuration, monitoring, and incident response
• Improving endpoint security: EDR, AV, patching, OS hardening
• Working with core infrastructure (AD / Entra ID, PKI, networking)
• Investigating emerging threats and advising on technical risk
• Supporting global IT teams across a large distributed environment

What you’ll need

• Strong Windows security engineering experience
• Solid understanding of host-based controls: application control, firewalling, logging, encryption
• Hands-on with endpoint protection, EDR, scanning and patching tools
• Experience with OS hardening, privileged access concepts, identity and security best practice
• Knowledge of common attack techniques and how to counter them
• Good grasp of Active Directory/Entra ID and PKI
• High level PowerShell programming skills
• Clear communicator, reliable, collaborative, able to influence technical decisions

This role suits someone who wants real ownership, thrives under pressure, and enjoys solving complex security problems at scale.

Discretion guaranteed - we never share profiles without your approval.