Security Engineer

Intropic is a financial information and software company operating at the cutting edge of global capital markets. We pair modern technology with deep market expertise to build information products that the world's most sophisticated financial institutions rely on every day. Our clients include hedge funds, proprietary trading firms, index fund managers, large asset managers, sovereign wealth funds, and investment banks, who use our products to generate alpha, manage risk, and make better decisions in fast-moving markets.

The Role: You will own the entire security stack at Intropic. Cloud, endpoints, detection and response, compliance, IT, and the security of our growing AI agent usage all sit with you. You set the priorities, you do the work, and you answer for the results. This suits someone senior who would enjoy the opportunity to lead security at a growing FinTech. On a given week you might harden an EKS cluster, tune a detection, scope a pentest, and work out how to give engineers safe access to coding agents. The AI security work in particular is a largely unsolved, very interesting problem, and you will define our approach to it. The role includes out-of-hours response to security alerts. This is a senior role, suitable for someone with 3+ years of experience in security.

Responsibilities:

• Security Engineering - 60%
  • Engineer and manage the security of our cloud infrastructure across AWS and GCP, from individual EC2 instances to a large EKS microservice estate.
  • Run detection and response: triage alerts, expand coverage, and keep the tooling honest.
  • Threat model new products and services before they ship, and embed security checks directly into CI/CD.
  • Define what good looks like when it comes to the security of our external SaaS app integrations.
  • Secure our use of AI agents and our production generative AI systems.
  • Establish an automated patching system for systems across every part of our cloud.
• GRC - 20%
  • Own SOC 2. Run the yearly Type II audit, scope the annual web application pentest, and automate as much of the evidence collection in Drata as you can.
  • Evaluate where gaps exist in our security policies and build out new policies to fill those gaps.
• IT - 20%
  • Assist with running onboarding and offboarding for joiners and leavers.
  • Assist with managing our fleet of roughly 100 endpoints through Jamf and Intune.
  • Respond to colleagues' security and IT access questions, and resolve them quickly and courteously.
  • Own and manage our core SaaS estate, including Google Workspace and GitLab access.

Requirements:

• 3+ years security experience spanning multiple domains.
• Advanced, hands-on knowledge of a wide range of AWS services.
• Practical experience with Kubernetes, ideally EKS.
• Experience threat modelling web applications and responding to real security incidents.
• Experience using AI agents in your own workflow or in security tooling.
• Understanding of SOC 2 and comfort with Git.
• Working knowledge of Jamf.
• Solid scripting ability in Python or Bash.
• Willingness and interest in learning and upskilling in areas of security, IT, or GRC.
• Ability to pivot quickly between different domains while keeping a high attention to detail.

Nice to Have:

• Experience of using both Jamf and InTune at a high level.
• Experience securing microservice architectures or EKS clusters specifically.
• Experience using AI agents for production security workflows.
• Ability to use SQL for detection and incident investigation.
• Having rolled out DAST or SAST in a production environment.