Staff Security Engineer

NJF Global Holdings Ltd; New York (NY); On-site; USD 180,000 - 260,000; Full time

Job summary

NJF Global Holdings Ltd in New York is seeking a Staff Security Engineer to join its Platform Security team. You will design secure hybrid infrastructures across cloud and on-prem environments, focusing on automation and risk management.

The role involves building security architectures, threat modelling, CI/CD security, and working with containers, Kubernetes, IAM and workload security, with hands-on coding in Python/Go/PowerShell.

Qualifications

• Proficient in Python/Go/PowerShell or similar scripting languages.
• Experience with threat modelling and software supply chain security.
• Hands-on security engineering across cloud and on-prem environments.

Responsibilities

• Designing and building secure platforms across cloud and on-prem environments.
• Developing security architectures, isolation patterns, trust boundaries and guardrails.
• Assessing new technologies and turning security risks into practical engineering controls.
• Working across networking, IAM, privileged access, containers, Kubernetes and workload security.
• Automating security controls using Terraform, policy-as-code, APIs and software engineering.
• Applying AI/LLM tooling and emerging technologies to improve security automation.
• Carrying out threat modelling and risk assessments across infrastructure, cloud and software.
• Collaborating with Infrastructure, Engineering, Research and other teams to deliver secure solutions.

Skills

Python

Go

PowerShell

Threat modelling

CI/CD

Supply-chain security

Tools

Terraform

Kubernetes

AWS

Job description

I'm currently working with a leading global quantitative investment firm that is looking to add a Staff Security Engineer to its growing Platform Security team in New York.

You'll be working across cloud and on-prem infrastructure, helping design secure platforms for new and emerging technologies. The role sits at the intersection of security and engineering, with a strong focus on automation, infrastructure, isolation and practical risk management.

What you'll be doing:

• Designing and building secure platforms across cloud and on-prem environments
• Developing security architectures, isolation patterns, trust boundaries and guardrails
• Assessing new technologies and turning security risks into practical engineering controls
• Working across networking, IAM, privileged access, containers, Kubernetes and workload security
• Automating security controls using Terraform, policy-as-code, APIs and software engineering
• Applying AI/LLM tooling and emerging technologies to improve security automation
• Carrying out threat modelling and risk assessments across infrastructure, cloud and software
• Working closely with Infrastructure, Engineering, Research and other teams to deliver secure solutions without creating unnecessary friction

What they're looking for:

• Strong experience designing secure hybrid infrastructure, ideally with AWS
• Solid knowledge of network security, IAM, least privilege and defence-in-depth
• Hands-on experience with containers, Kubernetes, virtualisation and workload security
• Good scripting or software development skills in Python, Go, PowerShell or similar
• Experience with threat modelling, CI/CD and software supply-chain security

It's a great opportunity for someone who wants to be involved in real security engineering rather than just writing policies, with plenty of scope to shape how security is approached as new technologies are introduced.