Security Engineer | Hedge Fund (D4511C9)

Referment; Greater London; On-site; GBP 90,000 - 130,000; Full time

Job summary

Referment is assembling a security function from the ground up with a greenfield opportunity to shape architecture, tooling, and processes. You will work with a highly technical team and senior leadership to design and implement a scalable, engineering-led security programme.

You’ll lead protection across cloud, infrastructure, and applications, while embedding security early in the development lifecycle and setting long-term architectural standards for the evolving platform.

Qualifications

• Experience in Security Engineering or Blue Team, threat detection, incident response.
• Experience securing cloud-native environments.
• Strong knowledge of IAM, authentication, authorisation, and PKI.

Responsibilities

• Design, build, and own detection and response capabilities, including alerting, threat detection, canaries, honeypots, and incident response workflows.
• Implement security controls across cloud, infrastructure, and application environments.
• Develop and enhance authentication, authorisation, identity, and certificate management frameworks.
• Partner closely with software and infrastructure engineers to embed security throughout the development lifecycle.
• Define the long-term security architecture, standards, and strategy as the platform evolves.

Skills

Security engineering

Threat detection

Cloud security

Identity security

Incident response

Security automation

Tools

IAM tools

PKI

Cloud platforms

Job description

Referment is partnering with a newly launched, technology-driven investment firm to hire a Security Engineer who will play a pivotal role in building the firm's security function from the ground up.

This is a genuine greenfield opportunity where you'll have significant ownership over security architecture, tooling, and processes from day one. Working alongside a highly technical engineering team and senior leadership, you'll help establish a modern, engineering-led security programme designed to scale with the business.

What You'll Be Doing

• Design, build, and own detection and response capabilities, including alerting, threat detection, canaries, honeypots, and incident response workflows
• Implement security controls across cloud, infrastructure, and application environments
• Develop and enhance authentication, authorisation, identity, and certificate management frameworks
• Partner closely with software and infrastructure engineers to embed security throughout the development lifecycle
• Define the long-term security architecture, standards, and strategy as the platform evolves.

What We're Looking For

• Strong experience in Security Engineering, Detection Engineering, Blue Team, Cloud Security, or a similar hands‑on security discipline.
• Expertise in threat detection, monitoring, incident response, and security automation.
• Experience securing modern cloud‑native environments
• Strong understanding of IAM, authentication, authorisation, PKI, and identity security.
• A builder's mindset with the desire to take ownership and create security capabilities from scratch.

Why join?

This is a rare opportunity to influence the security foundations of a business from its earliest stages. Rather than maintaining legacy infrastructure, you'll have the autonomy to design, build, and implement best‑in‑class security practices in a highly technical, fast‑moving environment where security is viewed as a strategic enabler.

#Referment