Client Platforms Security Engineer

DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.

Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.

We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus.

We are seeking a Client Platforms Security Engineer to work with the members of the security team to ensure that our client platform infrastructure, virtual or physical, is properly protected. You will engineer, maintain and implement security controls, audit configurations in a hybrid compute environment. You will generally ensure we are reducing risk footprint across the infrastructure without impacting its effectiveness. A successful candidate will have an attention to detail, the ability to understand what impact their changes will have on the business teams and the services they use.

What you’ll be doing:

• Maintain security tools and their associated configurations
• Manage and coordinate updates of tools when new versions are released
• Working with platform teams to deploy tools and changes as necessary after validating necessary performance and functionality requirements
• Identify solutions in the market and test them to see if they prove viable for our environment and use case
• Work with the platform teams to ensure the OS builds are as hardened to the extent they can be
• Identify and document ways to measure effectiveness of the client platform controls
• Assess risk in our client platform environment and provide mitigations for those risks
• Identify process improvements for automation of security hardening checks on client platforms
• Work with the operation teams internal and external to ensure identified risks are triaged, investigated, and remediated as necessary

What we’re looking for:

• Strong verbal, written, and interpersonal communication skills
• Bachelor’s degree or relevant work experience required
• Scripting/Development experience in any high-level language with the desire to build upon that repertoire
• Experience maintaining client OS platforms (e.g Windows, Linux, MacOS) in a physical and virtual world.
• Understanding of network fundamentals and protocols.
• Deep technical understanding of client OS platforms (e.g Windows, Linux, MacOS). Mobile OS platforms a plus (e.g. iOS, Android, etc)
• Experience with endpoint security suites and frameworks (e.g. Anti-Virus, EDR/XDR, execution flow control, etc)
• Strong, demonstrable experience in Cybersecurity engineering, design, implementation and documentation
• Experience with leading SOAR and SIEM solutions

Bonus Points For:

• Experience managing platforms like CrowdStrike, Sentinel One, or Carbon Black App Control
• Experience working with Qualys and a general understanding of vulnerability management processes
• Experience scripting with languages like Python, Powershell, and the Linux Shell

The annual base salary range for this position is $150,000 to $200,000 depending on the candidate’s experience, qualifications, and relevant skill set. The position is also eligible for an annual discretionary bonus. In addition, DRW offers a comprehensive suite of employee benefits including group medical, pharmacy, dental and vision insurance, 401k (with discretionary employer match), short and long-term disability, life and AD&D insurance, health savings accounts, and flexible spending accounts.

For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice.

California residents, please review the California Privacy Notice for information about certain legal rights.

[LI-LD1]