Senior Security Engineer

Senior Security Engineer Overview

Intropic is a financial information and software company that operates at the forefront of global capital markets. We leverage modern technology, including elastic cloud infrastructure and advanced AI systems, combined with deep market expertise to create information products relied upon by sophisticated financial institutions worldwide. Our clientele includes hedge funds, proprietary trading firms, index fund managers, large asset managers, sovereign wealth funds, and investment banks, who utilize our products to enhance decision-making and manage risks in dynamic markets. We are headquartered in Canary Wharf, London, and are expanding our global presence.

The Senior Security Engineer will take full ownership of the security stack at Intropic, encompassing cloud security, endpoint protection, detection and response, compliance, IT security, and the security of our AI agent usage. This role is ideal for a senior professional who seeks to lead security initiatives within a growing FinTech environment, rather than working within a limited scope of a larger team. Responsibilities will include hardening EKS clusters, tuning detection systems, scoping penetration tests, and ensuring secure access for engineers to coding agents. The position also requires out-of-hours response to security alerts.

Responsibilities

• Oversee the security infrastructure for Intropic, managing cloud environments across AWS and GCP, including individual EC2 instances and EKS microservices.
• Conduct detection and response operations by triaging alerts, expanding coverage, and ensuring the integrity of security tools.
• Handle security alerts, including after-hours responses, particularly for critical incidents.
• Threat model new products and services prior to their launch, integrating security checks into the CI/CD pipeline.
• Establish security standards for external SaaS app integrations, including creating approval workflows for OAuth connections.
• Secure the use of AI agents and generative AI systems, both for client-facing and internal applications.
• Collaborate with various business units to implement security measures that do not impede operational efficiency.
• Develop an automated patching system for all cloud-based systems.
• Manage the SOC 2 compliance process, including conducting the annual Type II audit and coordinating web application penetration tests.
• Identify gaps in existing security policies and develop new policies to address these deficiencies.
• Assist with the onboarding and offboarding processes for employees, creating automation to streamline these tasks.
• Manage approximately 100 endpoints using Jamf and Intune, primarily macOS devices.
• Address security and IT access inquiries from colleagues promptly and courteously.
• Oversee the management of core SaaS applications, including Google Workspace and GitLab, automating repetitive tasks.

Requirements

• A minimum of 5 years of experience in security across various domains.
• Hands-on expertise with a broad range of AWS services, including EC2, S3, GuardDuty, Lambda, ECS, and EKS.
• Practical experience with Kubernetes, particularly EKS.
• Experience in threat modeling web applications and responding to security incidents.
• Familiarity with AI agents in workflows or security tools.
• Understanding of SOC 2 compliance and proficiency with Git.
• Working knowledge of Jamf for endpoint management.
• Strong scripting skills in Python or Bash for task automation and system integration.
• Eagerness to learn and develop skills in new areas of security, IT, or GRC.
• Ability to switch between different domains while maintaining attention to detail and providing excellent user support.

Degree Requirement: Not Specified

Visa Sponsorship May be