Security Engineer | Hedge Fund (D4511C9)

Referment; Greater London; On-site; GBP 90,000 - 150,000; Full time

Job summary

Referment is hiring a Security Engineer to lead the creation of a security function from the ground up in a technology-driven investment firm headquartered in London. You will own detection, response, and security architecture from day one, working with a highly technical team and senior leadership to scale security as the business grows.

You will design and implement controls across cloud, infrastructure, and applications, and drive identity security and PKI frameworks.

Qualifications

• Extensive experience in security engineering and threat detection.
• Hands-on with cloud security and modern cloud-native environments.
• Deep knowledge of IAM, authentication, authorization, and PKI.
• A builder mindset and willingness to build security capabilities from scratch.

Responsibilities

• Design, build, and own detection and response capabilities.
• Implement security controls across cloud, infrastructure, and applications.
• Develop authentication, authorisation, identity management, and certificate handling.
• Partner with software and infrastructure engineers to embed security in the development lifecycle.
• Define long-term security architecture, standards, and strategy.

Skills

Security Engineering

Detection Engineering

Blue Team

Cloud Security

Threat Detection

Incident Response

Security Automation

Cloud-Native

IAM & PKI

Identity Security

Job description

Referment is partnering with a newly launched, technology-driven investment firm to hire a Security Engineer who will play a pivotal role in building the firm's security function from the ground up.

This is a genuine greenfield opportunity where you'll have significant ownership over security architecture, tooling, and processes from day one. Working alongside a highly technical engineering team and senior leadership, you'll help establish a modern, engineering-led security programme designed to scale with the business.

What You'll Be Doing

• Design, build, and own detection and response capabilities, including alerting, threat detection, canaries, honeypots, and incident response workflows
• Implement security controls across cloud, infrastructure, and application environments
• Develop and enhance authentication, authorisation, identity, and certificate management frameworks
• Partner closely with software and infrastructure engineers to embed security throughout the development lifecycle
• Define the long-term security architecture, standards, and strategy as the platform evolves.

What We're Looking For

• Strong experience in Security Engineering, Detection Engineering, Blue Team, Cloud Security, or a similar hands‑on security discipline.
• Expertise in threat detection, monitoring, incident response, and security automation.
• Experience securing modern cloud‑native environments
• Strong understanding of IAM, authentication, authorisation, PKI, and identity security.
• A builder's mindset with the desire to take ownership and create security capabilities from scratch.

Why join?

This is a rare opportunity to influence the security foundations of a business from its earliest stages. Rather than maintaining legacy infrastructure, you'll have the autonomy to design, build, and implement best‑in‑class security practices in a highly technical, fast‑moving environment where security is viewed as a strategic enabler.

#Referment