Security Engineer

Caxton Associates; Bengaluru; On-site; INR 1,500,000 - 2,100,000; Full time

Job summary

Caxton Associates LP in Bengaluru seeks a Security Engineer to harden, monitor, and improve security across endpoints, servers, and identity systems. You will work with EDR/XDR tooling, patching, and baseline OS hardening to strengthen our Windows infrastructure.

You will drive vulnerability management, implement access controls (AD/Azure AD), and develop automation scripts in PowerShell or Python to support secure deployments and incident response.

Qualifications

• Experience as a security engineer, preferably in financial services.
• Solid understanding of Zero Trust models.
• Hands-on with Windows security controls and endpoint protection.
• Strong scripting and automation ability.
• Excellent written and verbal communication.

Responsibilities

• Manage CrowdStrike and Defender tooling, vulnerability scans and patching.
• Implement and maintain Windows security controls and baselines.
• Improve core security controls across Windows/Linux systems.
• Drive vulnerability management initiatives.
• Monitor security alerts and assist with remediation.
• Manage identity and access (Active Directory, Azure AD, CA, MFA, SSO, SAML).
• Develop security documentation, playbooks and automation scripts (PowerShell/Python).
• Collaborate on architecture reviews and secure deployments.
• Automation around configuration, monitoring and incident response.
• Stay abreast of threats and regulatory changes; advocate security best practices.

Skills

Security engineering

Zero Trust

Scripting (PowerShell/Python)

Windows security controls

Communication skills

Tools

CrowdStrike

Microsoft Defender for Endpoint

Intune

Ivanti Neurons

Active Directory

Azure AD

SSO/SAML

PowerShell

Python

WDAC

AWS (desirable)

Linux administration (desirable)

Job description

About Caxton Associates:

Caxton Associates, founded in 1983, is a global trading and investment firm with offices in London, New York, Singapore, Monaco, Dubai and Bengaluru. Caxton Associates’ primary business is to manage client and proprietary capital through a suite of products designed to fit the specific needs of investors. Employing a multi-portfolio manager framework, Caxton excels in discretionary global macro investing, leveraging its diversified expertise across asset classes and markets.

About the Role:

We are seeking a Security Engineer to join the Systems Engineering and Infrastructure team. The role will be focused on hardening, monitoring, and improving security across endpoints, servers, identity systems, and supporting infrastructure.

The successful candidate will play a key role in the team, contributing to the operational efficiency, reliability, and security of our Windows infrastructure.

Responsibilities:

• Manage and optimize Crowdstrike/Microsoft Defender (EDR/XDR) tooling, vulnerability scanners and patching processes using Intune / Ivanti Neurons or equivalent
• Implement and maintain Windows security controls (group policy, baseline OS hardening, endpoint protection, patching and logging)
• Continuously improve the core security controls that protect Windows/Linux systems across the organization
• Drive vulnerability management initiatives
• Monitor security alerts, investigate incidents and assist with remediation
• Support and improve identity and access management across the organisation (Active Directory, Azure AD, Conditional Access, Phishing-resistant MFA, SSO, SAML)
• Perform regular security assessments, configuration reviews, and compliance checks
• Develop and maintain security documentation, playbooks, and automation scripts (PowerShell / Python).
• Collaborate on architecture reviews and secure deployments
• Building automation around configuration, monitoring and incident response
• Email security and associated threat/detection controls
• Stay abreast of latest cyber threats, technologies and regulatory changes. Continuously assess and improve the organisation’s security posture
• Advocate for security best practices across all teams

• Previous experience working in Financial Services (preferred)
• Proven experience as a Security Engineer or currently in a similar role
• Solid understanding of Zero Trust models/principles
• Solid understanding of host-based controls: application control / device control / encryption.
• Solid understanding and hands-on experience of Active Directory Services (EntraID/DNS/DHCP/FSMO/ADFS/SSO/ADCS/PKI/Group Policy)
• Solid understanding of networking concepts, including TCP/IP, LAN/WAN
• Scripting skills desirable (e.g. PowerShell, Batch scripting) for automating routine tasks and deployments
• Strong written, oral, and interpersonal communication skills
• Be able to communicate ideas in both technical and user-friendly language
• Highly self-motivated and directed, with a keen attention to detail
• Ability to manage time and prioritize tasks effectively in a fast-paced environment
• Strong collaborative skills with the ability to work effective in a team-oriented environment
• Displays and operates at the highest degree of ethics and integrity

Good to have:

• Hands-on experience of Windows Defender Application Control (WDAC) or third-party application/device-control platforms (desirable)
• Good knowledge of AWS Infrastructure and Linux administration (desirable)
• Experience with Microsoft Intune