Lead Security Engineer

Winston Fox; Greater London; On-site; GBP 70,000 - 95,000; Full time

Job summary

Winston Fox is seeking an exceptional Security Engineer to secure a world-class technology platform. This hands-on role spans cloud, identity, endpoints and infrastructure, embedding security into every layer and enabling engineering excellence.

You’ll work with Infrastructure, Cloud and Platform Engineers to automate, secure by design, observable and scalable solutions in a cloud-first environment.

Qualifications

• Security engineering mindset: secure by design, automated, observable and scalable.
• Experience with cloud security, identity, endpoints and infrastructure security.
• Strong automation skills using Python/PowerShell and IaC.
• Familiarity with SIEM/EDR platforms, vulnerability management and incident response.
• Ability to work across AWS/Azure and modern identity controls (Entra ID, AD, CA).

Responsibilities

• Designing and improving detection, monitoring and response across SIEM/EDR platforms.
• Lead investigation and technical response to complex security incidents with the MSP.
• Own vulnerability management from discovery to remediation and verification.
• Secure cloud environments across AWS/Azure, incl. IAM, logging and guardrails.
• Build automation to eliminate repetitive work and reduce operational risk.

Job description

Security shouldn't slow engineering down. It should enable it.

We're looking for an exceptional Security Engineer to help secure the technology platform behind one of the world's leading investment firms. This is a hands‑on engineering role where you'll work across cloud, identity, endpoints and infrastructure to build security that is automated, scalable and secure by design.

You'll work at the heart of our Infrastructure Engineering team—not hidden away in a traditional security function—partnering with Platform, Network and Cloud Engineers to embed security into everything we build.

This is a chance to shape the future of security in a modern, cloud-first environment where engineering excellence matters, automation is expected, and continuous improvement is part of the culture.

What You'll Own

This isn't a ticket-driven SOC role.

You'll become one of the firm's senior technical security specialists, helping protect a global technology platform spanning:

• Hybrid cloud infrastructure across AWS and Azure
• Enterprise identity and access management
• Network security
• Corporate technology
• Critical trading infrastructure

You’ll improve the platform every day—not simply respond when something goes wrong.

Your Mission

Build systems that are:

• Secure by design
• Highly automated
• Observable
• Practical
• Scalable
• Frictionless for engineers
• Resilient against modern threats
• You’ll automate repetitive work.
• You’ll reduce operational risk.
• You’ll raise the security maturity of the entire engineering organization.

What You'll Be Doing

You'll work across the full security engineering lifecycle, including:

• Designing and continuously improving detection, monitoring and response capabilities across modern SIEM and EDR platforms
• Leading the investigation and technical response to complex security incidents alongside our managed service provider
• Owning vulnerability management—from discovery and risk assessment through to remediation and verification
• Securing endpoints, identities and privileged access using Entra ID, Active Directory, Conditional Access and modern identity controls
• Designing secure cloud environments across AWS and Azure, including IAM, guardrails, logging and secure‑by‑default architectures
• Hardening endpoints, servers and cloud infrastructure using industry best practices and security baselines
• Building automation using Python, PowerShell and Infrastructure-as-Code to eliminate manual operational work
• Partnering with Infrastructure, Cloud and Network Engineering teams to embed security into every architectural decision
• Evaluating new security technologies and continuously improving the firm's defensive capabilities
• Developing incident response playbooks, technical documentation and operational standards
• Helping engineers and users alike understand security through practical advice—not fear, uncertainty or bureaucracy

What Great Looks Like

You’re an engineer first.

Security happens to be your specialism.

You enjoy building things.

You automate anything repetitive.

You understand risk but avoid unnecessary complexity.

You care about creating secure platforms rather than simply enforcing policy.

You’ll bring experience in:

• Security Engineering, Infrastructure Security or Security Operations
• SIEM and EDR platforms
• Identity security including Entra ID, Active Directory and Conditional Access
• AWS and/or Azure security architecture
• IAM, logging, guardrails and cloud-native security controls
• Vulnerability management and risk-based remediation
• Firewalls, segmentation and Zero Trust networking
• Python or PowerShell automation
• Infrastructure-as-Code

Experience within financial services is beneficial, but outstanding engineers come from many industries. If you've built secure platforms where reliability and resilience genuinely mattered, we'd like to hear from you.

Bonus Points

You’ll stand out if you've worked with technologies including:

• Wiz
• Tenable
• Teleport
• AWS Security Hub
• Microsoft Sentinel
• Penetration testing and remediation
• SOC 2, FCA or SEC regulated environments

Certifications such as CISSP, CISM, AZ‑500 or Microsoft Security certifications are welcomed but never a substitute for strong engineering ability and experience.

Why Join?

This is a chance to move beyond operational security and help build security into every layer of a world‑class technology platform.

You’ll work alongside exceptional Infrastructure, Cloud and Platform Engineers solving complex technical challenges where resilience, security and engineering quality have direct business impact.

You’ll have real influence over architecture, tooling and security strategy—not simply operate someone else’s platform.

If you’re excited by modern cloud security, automation, infrastructure engineering and solving genuinely difficult technical problems, we’d love to talk.