Senior Security Engineer

QRT is a global quantitative and systematic investment manager, operating across all liquid asset classes. We are a data- and technology-driven organization applying scientific methods to investing. Our collaborative culture and focus on innovation enable us to solve complex challenges and deliver high-quality returns for our investors. Security Engineering is a core capability at QRT, supporting the protection of our infrastructure, cloud platforms, applications and data. The team designs, builds and operates security controls across our globally distributed organisation, combining engineering expertise with a practical approach to reducing risk and supporting the needs of the business. Your future role within QRT We are seeking an experienced Senior Security Engineer to take technical ownership of complex security challenges across QRT’s global environment. This is a senior individual contributor role, combining hands-on engineering, technical leadership and collaboration across teams and regions. You will mentor junior engineers, act as a senior technical escalation point and contribute to security operations, including participation in the on-call rota. The role is expected to involve the following activities: - Own and drive complex security initiatives from discovery and design through implementation and ongoing operation, coordinating scope, dependencies and delivery across multiple teams. - Define and evolve technical architectures and engineering standards for key security capabilities, balancing security, reliability, performance and operational cost. - Design, build and improve controls across identity and privileged access, endpoints, cloud and on-premises infrastructure, data protection and security monitoring. - Identify material security weaknesses and attack paths, prioritise remediation according to business impact and address underlying causes of risk. - Automate deployment, configuration and operational tasks through APIs, scripting and infrastructure as code, ensuring changes are repeatable, tested and supported by appropriate rollback procedures. - Engineer resilient and supportable security services, with effective monitoring, actionable alerting, runbooks, recovery procedures and clear operational ownership. - Share responsibility for day-to-day security operations, including service health, support requests, maintenance and troubleshooting. Participate in the security on-call rota, responding to incidents and urgent issues outside normal working hours as required. - Partner with Security, Infrastructure, IT and development teams to integrate controls into existing services and workflows, resolve technical challenges and drive sustained adoption. - Provide senior technical leadership during complex incidents and service failures, leading troubleshooting, contributing to incident reviews and ensuring corrective actions are completed. - Mentor junior engineers through coaching, design reviews and practical guidance, acting as an escalation point and helping colleagues develop independent technical judgement. - Evaluate vendors and new technologies, define requirements, validate capabilities through testing and take ownership of successful integration and operational handover. Your present skillset - Substantial experience in security engineering within a complex enterprise environment, with a proven track record of delivering major initiatives across multiple teams or technology domains. - Deep hands-on expertise in several relevant areas, such as identity and access management, privileged access, endpoint security, cloud security, infrastructure hardening, secrets management, PKI, data protection or detection engineering. - Strong understanding of Windows and Linux, Active Directory and modern identity platforms, networking, authentication protocols and hybrid infrastructure. - Ability to operate at both architecture and implementation level, explaining design decisions, investigating complex technical issues and building or improving solutions directly. - Strong automation experience using scripting, APIs and infrastructure as code, with confidence using version control and delivery pipelines for security changes. - Experience delivering and operating reliable production services, including configuration management, upgrades, monitoring, resilience and recovery. - Sound risk judgement, with the ability to make pragmatic decisions under uncertainty, explain trade-offs and escalate material risks clearly. - Demonstrable ability to influence without formal authority, build productive relationships and secure agreement with technical and non-technical stakeholders. - Strong ownership, organisation and delivery skills, with the ability to clarify ambiguous requirements, anticipate dependencies and resolve obstacles through to completion. - Experience mentoring junior engineers and providing senior technical escalation support, including incident response and participation in an on-call environment. Desirable to have experience or a willingness to learn in the following areas: - Quantitative trading, financial services or other environments with demanding availability and performance requirements. - Delivering security services across multiple regions, cloud environments and data centres, including migration from legacy controls to modern platforms. - Platforms such as Okta or Microsoft Entra ID, Microsoft Defender and Intune, HashiCorp Vault, enterprise PAM solutions, Splunk and cloud-native security services. Equivalent experience with comparable technologies is equally relevant. QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we offer initiatives and programmes to enable employees to achieve a healthy work-life balance.