We are seeking a hands-on Infrastructure & Security Engineer with deep expertise across security architecture, server, and network domains. Security is the core priority of this role. The successful candidate will take a leading part in strengthening and evolving the firm's security posture in response to an increasingly sophisticated threat landscape, including emerging risks associated with AI.
This is a technically demanding role that combines proactive security ownership with infrastructure delivery. The successful candidate will act as a security-first thinker across everything they touch, from day-to-day operations through to strategic infrastructure design, and will be expected to drive meaningful improvements to the firm's defensive capabilities.
This role is office-based and requires five days per week on-site presence.
Key Responsibilities
-
Lead the firm's security operations function, owning threat detection, incident response, and vulnerability management end-to-end
-
Monitor, triage, and respond to security events across the environment, including log analysis, anomaly detection, and threat hunting, with a strong awareness of modern and AI-enabled attack vectors
-
Own and drive security hardening across all infrastructure — servers, endpoints, network devices, and cloud-adjacent systems — ensuring consistent application of best practices and compliance with security policies
-
Design and implement secure infrastructure solutions, embedding security requirements from the outset rather than retrofitting them
-
Conduct regular vulnerability assessments and penetration testing exercises, prioritising and remediating findings in a timely manner
-
Manage and continuously improve security tooling, including SIEM, EDR, firewalls, IDS/IPS, and endpoint protection platforms
-
Act as the escalation point for security-related incidents across 2nd and 3rd line, providing expert guidance and driving resolution
-
Support and maintain network infrastructure including firewalls, switches, VPNs, and wireless systems (primarily Cisco-based), with a security lens on all configuration and change
-
Operate across Windows and Linux (Red Hat/CentOS) environments, ensuring both are maintained to a consistent security baseline
-
Collaborate with infrastructure and technology teams to embed security into project delivery and BAU processes
-
Develop and maintain security documentation including incident response playbooks, SOPs, architecture diagrams, and runbooks
-
Stay current with the evolving threat landscape, bringing proactive recommendations to improve the firm's security posture over time
-
Participate in an on-call rotation to support critical systems and respond to security incidents outside business hours
Requirements
-
Minimum 7+ years’ experience in infrastructure, networking, and security roles
-
Strong hands-on experience with Windows Server and Linux (Red Hat/CentOS)
-
Solid networking knowledge, including TCP/IP, VLANs, VPNs, DNS, DHCP, with practical experience in Cisco environments
-
Demonstrated experience implementing and supporting security controls, including:
-
Patch management and system hardening
-
Endpoint protection and monitoring
-
Identity and access management
-
Good understanding of cyber security principles, including modern threat landscapes and evolving risks (e.g. automation and AI-driven attack vectors)
-
Experience with virtualisation (VMware) and enterprise storage (SAN/NAS)
-
Scripting or automation experience (e.g. PowerShell, Bash) is advantageous
-
Experience in financial services or regulated environments is preferred
-
Strong troubleshooting skills with a structured and analytical approach
-
Able to balance BAU responsibilities with project delivery effectively
-
A thoughtful and forward-looking mindset, with the ability to identify risks and propose improvements
-
Clear and confident communicator, able to engage with both technical and non-technical stakeholders
-
Self-motivated, accountable, and willing to take ownership of issues end-to-end
-
Collaborative and adaptable, with a practical and solutions-focused approach
