What You'll Do

• Implement and maintain security controls across multi-cloud environments (primarily AWS, with some Azure, GCP and AliCloud) and on-prem infrastructure
• Own IAM strategy and implementation: design and enforce identity, access, and permissions models that are secure, scalable, and practical
• Design and operate key management and custody security controls such as HSMs, secrets management, and secure key handling for trading operations
• Harden CI/CD pipelines (GitLab) and secure the software delivery process
• Configure and operate corporate security tooling (endpoint protection, MDM/Jamf, DLP, identity management)
• Respond to security incidents: triage, investigate, contain, remediate
• Conduct security assessments of infrastructure and applications
• Automate security operations: detection, alerting, and response
• Work with Infrastructure to embed security into cloud provisioning and system configuration

What We're Looking For

• 8+ years' hands-on experience in security engineering or security operations
• Strong, opinionated views on IAM (you've designed and implemented identity and access management across cloud environments and have a clear philosophy on how it should work)
• Strong working knowledge of cloud security controls across multiple providers (AWS and Azure preferred)
• Experience securing CI/CD platforms, GitLab preferred
• Familiarity with corporate IT security tooling (Jamf, endpoint protection, DLP, SSO/IdP)
• Comfortable in Linux environments and scripting (Python, Bash, or similar)
• Experience with infrastructure-as-code (Terraform, Pulumi etc.) is a plus
• Exposure to financial services, crypto, or other regulated environments is a plus but not required
• We value demonstrated skills and practical experience over certifications.

What You Get

• Direct ownership of security implementation
• A small, technical team where your work has immediate impact
• Exposure to low-latency trading infrastructure and the digital asset space
•