Security Engineer

Marex Group plc (NASDAQ: MRX) is a diversified global financial services platform providing essential liquidity, market access and infrastructure services to clients across energy, commodities and financial markets. The group provides comprehensive breadth and depth of coverage across four core services: clearing, agency and execution, market making, and hedging and investment solutions. It has a leading franchise in many major metals, energy and agricultural products, with access to 60 exchanges.

The group provides access to the world’s major commodity markets, covering a broad range of clients that include some of the largest commodity producers, consumers and traders, banks, hedge funds and asset managers. With more than 40 offices worldwide, the group has over 3,000 employees across Europe, Asia and the Americas.

The Technology Department delivers differentiation, scalability and security for the business. Technology provides digital tools, software services and infrastructure globally to all business groups. Software development and support teams work in agile ‘streams’ aligned to specific business areas. Our other teams work enterprise-wide to provide critical services including our global service desk, network and system infrastructure, IT operations, security, enterprise architecture and design.

The Information Security team reports to the CISO and is responsible for protecting Marex data and assets, as well as providing security advice. The team is relatively small; therefore, its members have a chance to experience various areas of security.

The Security Engineer will work within the Cyber Security team, reporting to the Cyber Security Manager, and will be responsible for engineering, administering, and continually improving security capabilities across the Marex Group, with a primary focus on Identity Protection, Privileged Access Management, and associated access control environments.

The role will support the secure management of privileged accounts, access workflows, credential rotation, platform onboarding, incident response, control monitoring, and operational governance relating to privileged access. In addition, the role will contribute to broader identity security capabilities, including secrets management, certificate and PKI-related controls, and the improvement of identity-related security processes.

Beyond its core identity and PAM responsibilities, the role will support wider cyber security engineering activities, including security platform operations, automation, tooling enhancements, threat detection improvements, and response to security incidents as business and security priorities evolve.

Responsibilities

• Engineer security products to be production ready.
• Configure security toolset and controls to identify anomalies, potential incidents, network intrusions, and malware events, ensuring confidentiality, integrity, and availability of Marex’s critical systems.
• Find gaps in architecture, define objectives and areas of improvement, engineer products to fit the gaps for effective threat detection and response.
• Developing and documenting cyber security standards and procedures.
• Collaborate with technology teams for incident handling, patching disciplines, and system hardening frameworks.
• Collaborate with the Information Technology team on deployment, operation, and continual improvements of security solutions.
• Automation of tasks and creation of analytical tools.
• Keeping up to date with security news and trends.
• Threat Intelligence and Hunting.
• Responding and investigating security incidents and exceptions.
• Providing relevant KPI and KRI metrics.

All staff:

• Ensuring compliance with the company’s regulatory requirements under the FCA, NFA, AMF, AFM, MAS.
• Adhere to the operational risk framework for your role ensuring that all regulatory or company determined parameters are complied with.
• Role model for demonstrating highest level standards of integrity and conduct and reflecting Company Values.
• At all times complying with the FCA’s Code of Conduct.
• To ensure that you are fully aware of and adhere to internal policies that relate to you, your role or any other activities for which you have any level of responsibility.
• To report any breaches of policy to Compliance and/or your supervisor as required.
• To escalate risk events immediately.
• To provide input to risk management processes, as required.