Enterprise Security Engineer in Westminster

Overview of a wide variety of systems (including conventional compute and AI workloads) spanning public cloud (AWS/GCP/Azure) and hybrid cloud platforms. Instrumenting observability for the cloud and AI systems where there are unique high performance requirements. Engineer, implement, and maintain IAM solutions for infrastructure components and enterprise tools in a cloud-native manner. Design, implement, and manage a comprehensive vulnerability management program using industry-standard tools to effectively prioritize and remediate security risks. Detecting configuration drift or malicious activity as a signal for Security Operations. Collaborating with Security Operations and engineering teams to write runbooks for handling incidents/issues around secure cloud and AI/LLM usage. Identify security threats and vulnerabilities to cloud and AI systems currently in use at HRT, as well as evaluate security needs for any future solutions.

Responsibilities

• Architect and implement security controls that encourage secure design patterns in the public and hybrid cloud, and our AI ecosystem.
• Manage and secure IAM for infrastructure components and enterprise tools in a cloud-native manner.
• Design, implement, and manage a vulnerability management program using industry-standard tools to prioritize and remediate security risks.
• Detect configuration drift or malicious activity as a signal for Security Operations.
• Collaborate with Security Operations and engineering teams to write runbooks for incidents/issues around secure cloud and AI/LLM usage.
• Identify security threats and vulnerabilities to cloud and AI systems currently in use at HRT, and evaluate security needs for future solutions.

Qualifications

• 5+ years of experience in a security engineering role
• 5+ years of software development experience, preferably in Python
• Experience developing and operating in a DevSecOps lifecycle to implement automated controls for Kubernetes, containers, public cloud deployments and AI workloads
• Experience working with and securing Linux systems (Debian is a huge plus!)
• Experience securing SaaS platforms is a plus

Salary & Benefits

The estimated base salary range for this position is 150,000 - 250,000 USD per year (or local equivalent). The base pay offered may vary depending on multiple individualized factors, including location, job-related knowledge, skills, and experience. This role will also be eligible for discretionary performance-based bonuses and a competitive benefits package.

Culture

Hudson River Trading (HRT) brings a scientific approach to trading financial products. We have built one of the world's most sophisticated computing environments for research and development. Our researchers are at the forefront of innovation in the world of algorithmic trading. Hudson River Trading (HRT) is looking for a curious and innovative cybersecurity engineer who is excited about modern cloud, infrastructure, and AI security practices. Our Enterprise Security team is responsible for safeguarding the infrastructure behind one of the most technically demanding trading environments in the world. From securing cloud and computing platforms to strengthening IAM practices and advancing AI security, your work will be central to how we protect and scale HRT's technology. In this role, you'll have the autonomy to shape HRT's global cybersecurity systems while developing high-impact solutions built for both performance and resilience. We're looking for someone who thrives in DevSecOps, values defense in depth without adding developer friction, and approaches challenges with both rigor and creativity.

Equal Opportunity

HRT is an equal opportunity employer; so whoever you are we'd love to get to know you. We are committed to fostering a diverse environment.

Interview Note

Please be advised: Use of AI tools during interviews or assessments is strictly prohibited, unless otherwise instructed or agreed upon. We employ various methods to evaluate the authenticity of candidate responses. If we determine that AI assistance was used during any stage of the hiring process, we reserve the right to immediately disqualify your candidacy or rescind any job offers extended.