Staff Security Engineer

I’m currently working with a leading global quantitative investment firm that is looking to add a Staff Security Engineer to its growing Platform Security team in New York.

While professional experience and qualifications are key for this role, make sure to check you have the preferable soft skills before applying if required.

You’ll be working across cloud and on-prem infrastructure, helping design secure platforms for new and emerging technologies. The role sits at the intersection of security and engineering, with a strong focus on automation, infrastructure, isolation and practical risk management.

What you’ll be doing:

• Designing and building secure platforms across cloud and on-prem environments
• Developing security architectures, isolation patterns, trust boundaries and guardrails
• Assessing new technologies and turning security risks into practical engineering controls
• Working across networking, IAM, privileged access, containers, Kubernetes and workload security
• Automating security controls using Terraform, policy-as-code, APIs and software engineering
• Applying AI/LLM tooling and emerging technologies to improve security automation
• Carrying out threat modelling and risk assessments across infrastructure, cloud and software
• Working closely with Infrastructure, Engineering, Research and other teams to deliver secure solutions without creating unnecessary friction

What they’re looking for:

• Strong experience designing secure hybrid infrastructure, ideally with AWS
• Solid knowledge of network security, IAM, least privilege and defence-in-depth
• Hands-on experience with containers, xhqgsiq Kubernetes, virtualisation and workload security
• Strong Terraform / infrastructure-as-code experience
• Good scripting or software development skills in Python, Go, PowerShell or similar
• Experience with threat modelling, CI/CD and software supply-chain security

It’s a great opportunity for someone who wants to be involved in real security engineering rather than just writing policies, with plenty of scope to shape how security is approached as new technologies are introduced.