Core IP Security Software Engineer

The Core IP Security team designs, builds and operates the bespoke security systems that protect the firm’s most sensitive intellectual property across its full lifecycle, from research through to production systems. Our systems are purpose-built for highly sensitive environments and include cryptographic key management, encrypted source code and document hosting, access control and approval workflows, classification and risk-reporting, and detection and scanning tools. As a Software Engineer, you will take ownership of designing, developing and operating these systems across service backends, cryptographic libraries, API integrations and hardened infrastructure. The software you build must meet the highest standards of correctness, auditability and availability. You will work on both new capabilities and improvements to existing systems, partnering closely with research stakeholders to deliver effective security controls that support workflows without creating unnecessary friction. This is a hands-on role with significant autonomy in a small, focused team where every engineer has a meaningful impact. Key responsibilities Key responsibilities of the role include: Designing and implementing high-assurance security systems to protect sensitive and valuable intellectual property Developing and maintaining cryptographic key management services, access-control policies and shared security libraries Building and evolving access control, classification and risk-reporting systems to support governance and auditability Developing APIs and integrations that embed security controls into the wider engineering platform Contributing to detection and scanning capabilities to identify protected assets and validate controls Operating and hardening security-critical infrastructure, including physical server environments with dual-control operational procedures Participating in disaster recovery planning, testing and execution for critical security systems Identifying opportunities to simplify, replace or rebuild existing systems when better approaches are available

Requirements

We are looking for an engineer who combines strong software development skills with an interest in security, cryptography and high-integrity systems. You should be comfortable working across the full stack, from service backends and APIs to cryptographic libraries and infrastructure automation in a collaborative, fast-moving environment. The ideal candidate will have the following skills and experience: Essential: Strong experience delivering production-quality software, ideally using C#/.NET Strong understanding of software architecture, concurrency, distributed systems and API design Experience building or operating security-sensitive systems where correctness and auditability are critical Sound engineering judgement, balancing security, performance, reliability and delivery Clear communication skills and a collaborative, pragmatic approach Experience with modern development practices, including CI/CD, code review and automated testing Highly desirable: Experience with cryptography, key management or security-sensitive infrastructure Experience with hardened environments, operational controls or shared security components Familiarity with access control, identity management or approval workflow engines Strong Linux, infrastructure automation and Kubernetes experience, including infrastructure as code and observability tooling Full-stack development experience for internal tools and dashboards Nice to have: Experience with Python, TypeScript, Go or Rust Exposure to threat modelling, remediation or security architecture reviews Experience in regulated or security-conscious environments Familiarity with Git internals, self-hosted Git platforms or source code management security