Senior Security Engineer

Salary: £65,000 - 105,000 per year

Requirements:

• Extensive experience administering Microsoft Entra ID, including Conditional Access, Identity Protection, Privileged Identity Management (PIM), Entitlement Management, Access Reviews, Lifecycle Workflows, and application integrations.
• Experience implementing governance controls within hybrid Microsoft and AWS environments.
• Experience securing AWS environments using services such as IAM, Security Hub, GuardDuty, CloudTrail, Config, AWS Organizations, Route 53, and Key Management Service (KMS).
• Strong experience with Microsoft security technologies including Microsoft Defender XDR, Microsoft Sentinel, Microsoft Purview, Intune, Entra ID, Azure Security services, and Information Protection capabilities.
• Demonstrated ability to use PowerShell, Bash, and Python to automate security tasks, streamline processes, and improve system efficiency.
• Skilled in assessing and hardening operating systems and SaaS applications in line with CIS and STIG standards.
• Experience securing and administering SaaS platforms through SSO, SCIM provisioning, Conditional Access, entitlement governance, and lifecycle management.
• Experience managing endpoint security solutions across Windows and macOS environments, including EDR, device hardening, application control, and compliance monitoring.
• Experience securing enterprise networks using firewalls, Web Application Firewalls (WAF), Secure Web Gateways (SWG), Zero Trust Network Access (ZTNA), DNS security solutions, and cloud-native network controls.
• Experience configuring and managing Secure Web Gateways such as Zscaler, iBoss, and Netskope.
• Experience with binary execution control solutions such as AppLocker, Defender Application Control, Santa, and ThreatLocker across Mac and Windows endpoints.

Responsibilities:

• Design, implement, and maintain Identity and Access Management (IAM) solutions, including Microsoft Entra ID, Entra Identity Governance, AWS IAM Identity Centre, and supporting authentication and authorisation services.
• Manage permission settings and access controls to ensure secure and efficient user access to company resources.
• Ensure security systems are configured according to specified requirements and industry best practices.
• Assess security configurations across cloud and endpoint platforms, benchmark controls against CIS, STIG, SOC2, and internal security standards, and drive remediation activities to improve security posture.
• Own the administration, configuration, and lifecycle management of security platforms across cloud, endpoint, identity, and network domains.
• Maintain accurate inventories of security tooling and integrations.
• Evaluate new technologies and recommend enhancements to improve security effectiveness and operational efficiency.
• Partner with vendors and internal stakeholders to troubleshoot issues and maximise platform value.
• Act as a trusted security advisor to technical teams, business stakeholders, and senior leadership, providing guidance on security architecture, risk reduction, and regulatory compliance.
• Provide technical advice on security measures and potential enhancements.
• Create or update policies and procedures to align with industry regulations and best practices.
• Manage vulnerability management activities across cloud infrastructure, endpoints, SaaS applications, and identity platforms using tools such as Wiz, Microsoft Defender, and ArmorCode.
• Prioritise and coordinate remediation efforts based on business impact, exploitability, and risk exposure.
• Conduct security assessments and threat modelling exercises for new projects and technologies.
• Ensure security controls align with SOC2, ISO27001, CIS Controls, and organisational risk management requirements.
• Produce reports and metrics demonstrating security posture, control effectiveness, and remediation progress.
• Develop and maintain automation solutions using PowerShell, Python, Bash, and APIs to improve operational efficiency and reduce manual effort.
• Design, implement, and support Infrastructure as Code (IaC) solutions using Terraform and cloud-native tooling.
• Integrate security telemetry into SIEM platforms such as Microsoft Sentinel to improve threat detection and monitoring capabilities.
• Develop automated controls and workflows to enhance governance, compliance, and incident response processes.

Technologies:

• AWS
• Azure
• Bash
• Cloud
• IAM
• Support
• macOS
• Network
• PowerShell
• Python
• Security
• Terraform
• WAF
• Web
• Windows
• Blockchain
• Microsoft 365
• Office 365

More:

Since being founded in 2018, we have been building the standard for institutional digital asset infrastructure with a focus on custody, collateral management, and prime services. We provide a comprehensive suite of custody, trading, and settlement solutions that reduce counterparty risk and improve capital and operational efficiency across digital asset markets. Our technology is built around MPC-based secure custody and ClearLoop, which connects global exchanges and enables customers to trade and settle directly from MPC-secured wallets. We are a fast-moving, dynamic team with offices in London and across APAC, Switzerland, the UAE, and the US, and we operate a hybrid working model. We value innovation, openness, curiosity, diversity, and inclusion, and we offer a welcoming working environment, career opportunities, a thoughtful interview process, and UK benefits including 35 days of paid time off, comprehensive medical insurance, life insurance, enhanced pension contributions, and a 24/7 Employee Assistance Programme.

last updated 34 week of 2026