b Overview /b p In this role you will strengthen Windows endpoints, identity and across the corporate estate with practical security engineering. You’ll automate security processes using PowerShell and Python, and work with platform teams to embed protections at scale. Expect focus on measurable, maintainable controls, prevention, detection, and timely vulnerability remediation in a high-performance trading environment. /p b Pay / Benefits /b ul li hybrid work model /li li industry-leading compensation /li li opportunity to tackle difficult security problems /li li collaboration with experienced engineers /li /ul b Responsibilities /b ul li Engineer safeguards for Windows endpoints, remote-access platforms, and the corporate estate /li li Automate security processes with PowerShell, Python, and vendor APIs to reduce repetitive work /li li Enhance prevention and detection using application control, host firewalls, audit policy, telemetry, encryption, Microsoft Defender, and exploit protection /li li Drive vulnerability remediation by balancing technical severity with operational impact /li li Strengthen access and identity controls across Active Directory, Entra ID, Kerberos, privileged accounts, and certificate infrastructure /li li Evaluate emerging attack techniques and translate findings into engineering changes /li li Collaborate with platform and software teams to ensure protections fit system design and operations /li /ul b Key requirements /b ul li Explain Windows authentication, logon behavior, access tokens, privileges, UAC and Group Policy in practical terms /li li Delivered endpoint controls involving EDR, anti-malware, allowlisting, firewalls, disk encryption, vulnerability tooling or patch management /li li Understand TLS, OIDC, PKI, X.509 certificates and least-privilege design /li li Distinguish theoretical weaknesses from credible compromise routes and prioritize remediation /li li Write reliable production-grade PowerShell /li li Python and security product integrations are beneficial /li li Strong communication, balanced risk decisions, and ability to push technical work forward within operational constraints /li /ul ul li clear communication /li li balanced risk judgment /li li ability to work with cross-functional teams /li li Windows endpoint security /li li EDR / anti-malware / allowlisting /li li Host firewalling /li /ul
Senior Infrastructure Security Engineer employer: Quant Capital
At Quant Capital, we pride ourselves on being an exceptional employer, offering a dynamic and innovative work environment that mirrors the culture of leading tech giants like Facebook and Google. Our London office fosters a collaborative atmosphere where employees are encouraged to think critically and make impactful decisions, while also providing ample opportunities for professional growth and mastery of cutting-edge technology in the trading operations space. With a focus on employee well-being and a commitment to excellence, we ensure that our team members are equipped with the tools and support they need to thrive in their roles.
