Senior Security Engineer – Cloud-First Hedge Fund Scale-Up (London)

Winston Fox; Greater London; On-site; GBP 90,000 - 140,000; Full time

Job summary

Winston Fox seeks a Senior Security Engineer to join a fast-growing hedge fund. You will lead design, implementation and tuning of security monitoring and response, manage vulnerabilities, and harden endpoints, servers and cloud workloads across AWS/Azure with automation.

You will collaborate with MSPs and internal teams, tackling strategic initiatives in a high-pressure, on-site environment in London. 7+ years of experience and CISSP/CISM or equivalent preferred.

Qualifications

• 7+ years in Security Engineering or similar Infra role, preferably in Financial Services.

Responsibilities

• Design, implement and tune Security Monitoring, Detection and Response (SIEM/EDR).
• Own Vulnerability Management and remediation tracking.
• Administer and optimise Endpoint and Network Security Controls.
• Implement hardening standards across endpoints, servers and cloud workloads.
• Develop Automation for Security Operations and Infrastructure, collaborating with cross-functional teams.

Skills

SIEM/EDR

Identity security

Cloud security

Vulnerability management

SOC 2/NIST

Python

PowerShell

IaC

Tools

Python

PowerShell

Terraform

Job description

Senior Security Engineer sought by a fast-growing Multi-Strategy Hedge Fund business. This is a relatively Greenfield environment in a world-class business which is scaling quickly, with extensive opportunities for interesting, cutting-edge projects.

Our client is a relatively recent Hedge Fund start-up, now managing $5BN+ requiring someone who can work well with both the business as well as with MSPs, operate with a high degree of accountability, able to manage multiple concurrent projects efficiently and flexibility, whilst also collaborating effectively with a global team across multiple time zones. The ideal candidate is a strong technologist with a generalist mindset—comfortable wearing multiple hats, adapting quickly, and delivering in a high-pressure environment. An especially interesting feature of this opportunity is that they have various MSPs carrying out the standard project work, therefore this team take on the most challenging and strategic projects!

This is a broad and generalist Security Specialist role as part of a Core Infrastructure Engineering team, blending hands-on Security Engineering - Monitoring, Detection, Vulnerability Management and Hardening - with Secure-by-Design partnership across the team, working closely with the business as well as with an MSP who undertake the more generic project work and support. The role therefore requires a broad skillset spanning SIEM/EDR, Identity & EndPoint Security, Cloud Security (AWS and/or Azure), Vulnerability Management, SOC 2 and NIST Controls, and Automation using Python/PowerShell/IaC.

Key responsibilities include the design, implementation and tuning of Security Monitoring, Detection and Response capabilities (SIEM/EDR), integrating commercial tools and developing custom detections where needed. You will also own Vulnerability Management; administering and optimising Endpoint and Network Security Controls; Implementing and maintaining hardening standards across Endpoints, Servers and Cloud workloads; and developing Automation for Security Operations and Infrastructure. All while partnering with Network, Cloud Platform and other teams to embed Security into Architecture and Platform Engineering decisions. You will also own the Cloud Security posture across AWS and/or Azure, including IAM, Guardrails, Logging, and secure configuration of Core Services, while developing Automation for Security Operations and Infrastructure.

Requirements

• 7+ years in Security Engineering, Security Operations or a similar Infrastructure role, ideally within Financial Services.
• Hands-on SIEM/EDR experience: alert triage, investigation, tuning and detection logic.
• Strong understanding of identity and endpoint security: Conditional Access, Entra ID / Active Directory security controls, Teleport, device compliance/posture management.
• Experience with Cloud Security across AWS and/or Azure: IAM, guardrails, logging and secure configuration.
• Practical Vulnerability Management experience: scanning, risk-based prioritisation and remediation tracking.
• Working knowledge of Network Security Principles: Firewalls, segmentation, ZTNA/secure web gateway.
• Solid understanding of SOC 2 and NIST controls, evidence and audit support.
• Scripting/automation skills: Python and/or PowerShell, plus familiarity with Infrastructure-as-Code.
• Certifications such as CISSP, CISM, AZ-500, SC-300/SC-400, or equivalent preferred.

This is an outstanding opportunity to join a major multi-strategy Hedge Fund in its early stages of operations and growth with a strong pipeline of greenfield projects and initiatives. Please note that this firm operate a full-time onsite, five-days per week policy.