Security Engineer | Hedge Fund (B237EF6)

Referment; Greater London; On-site; GBP 70,000 - 110,000; Full time

Job summary

Referment is building a security function from the ground up, giving you ownership over architecture, tooling and processes from day one. You will work with a highly technical engineering team and senior leadership to establish a modern, engineering-led security programme that scales with the business.

In this greenfield role you will design and implement detection, response, and security controls across cloud, infrastructure and applications, partnering with engineers to embed security

Qualifications

• Experience in security engineering and blue team activities.
• Strong threat detection, monitoring and incident response capabilities.
• Proficiency with securing cloud-native environments.
• Solid understanding of IAM, authentication, authorisation, PKI and identity security.

Responsibilities

• Design, build and own detection and response capabilities including alerting and incident response workflows.
• Implement security controls across cloud, infrastructure and apps.
• Develop authentication, authorisation, identity and certificate management frameworks.
• Partner with software and infra engineers to embed security in the development lifecycle.
• Define long-term security architecture, standards and strategy as the platform evolves.

Skills

Security Engineering

Threat detection

Cloud security

IAM & PKI

Incident response

Job description

Referment is partnering with a newly launched, technology-driven investment firm to hire a Security Engineer who will play a pivotal role in building the firm's security function from the ground up.

This is a genuine greenfield opportunity where you'll have significant ownership over security architecture, tooling, and processes from day one. Working alongside a highly technical engineering team and senior leadership, you'll help establish a modern, engineering-led security programme designed to scale with the business.

What You'll Be Doing

• Design, build, and own detection and response capabilities, including alerting, threat detection, canaries, honeypots, and incident response workflows
• Implement security controls across cloud, infrastructure, and application environments
• Develop and enhance authentication, authorisation, identity, and certificate management frameworks
• Partner closely with software and infrastructure engineers to embed security throughout the development lifecycle
• Define the long-term security architecture, standards, and strategy as the platform evolves.

What We're Looking For

• Strong experience in Security Engineering, Detection Engineering, Blue Team, Cloud Security, or a similar hands-on security discipline.
• Expertise in threat detection, monitoring, incident response, and security automation.
• Experience securing modern cloud-native environments
• Strong understanding of IAM, authentication, authorisation, PKI, and identity security.
• A builder's mindset with the desire to take ownership and create security capabilities from scratch.

Why join?

This is a rare opportunity to influence the security foundations of a business from its earliest stages. Rather than maintaining legacy infrastructure, you'll have the autonomy to design, build, and implement best-in-class security practices in a highly technical, fast-moving environment where security is viewed as a strategic enabler.