Infrastructure Security Engineer | Integrated Global Financial Institution

Role Overview

We’re representing a global financial institution investing heavily in strengthening its core security engineering capability across infrastructure and platform services. As part of this, they are looking to hire a hands‑on Infrastructure Security Engineer to take ownership of a broad set of security technologies underpinning enterprise environments. This role sits between security operations and platform engineering – focused on building, integrating, and optimising security tooling rather than simply monitoring it. You’ll act as a technical lead across multiple security platforms, working closely with internal teams and vendors to ensure systems are robust, scalable, and aligned with evolving security requirements.

Key Responsibilities

• Engineer, deploy, and enhance enterprise security platforms across endpoint, network, and cloud environments
• Own the lifecycle of key tooling including configuration, upgrades, optimisation, and integration
• Act as a subject matter expert across multiple security technologies, supporting both project and BAU initiatives
• Lead implementation and replacement of security platforms within complex enterprise environments
• Troubleshoot platform issues, performing root cause analysis and driving long‑term fixes
• Support and refine security monitoring capabilities through improved configurations and use‑case tuning
• Collaborate with vendors to resolve issues, evaluate capabilities, and guide product adoption
• Contribute to governance, standards, and documentation across supported platforms
• Partner with security operations teams, acting as an escalation point where required
• Drive automation across security workflows using scripting and tooling

What You’ll Bring…

• 5‑8 years’ experience in security engineering, infrastructure security, or platform security roles
• Strong hands‑on experience with security tooling across EDR, SIEM (e.g., Splunk), SOAR, and network security platforms
• Practical experience with SASE architectures, next‑generation firewalls, and proxy technologies
• Solid understanding of networking fundamentals (DNS, IP, routing concepts)
• Experience deploying, upgrading, and integrating enterprise security platforms
• Strong troubleshooting capability, with a structured approach to root cause analysis
• Working knowledge of Linux (RHEL) and Windows environments
• Experience scripting or automating workflows using Python, PowerShell, or similar
• Familiarity with virtualisation platforms (e.g., VMware or equivalent)
• Understanding of the incident response lifecycle, with ability to support escalation scenarios
• Strong communication skills, able to engage both technical teams and stakeholders
• (Preferred) Background in financial services or other regulated environments

Compensation: Up to c. $270k total package
Work Model: Hybrid working with some on‑call expectations