Security Engineer

About Caxton Associates:

Caxton Associates, founded in 1983, is a global trading and investment firm with offices in London, New York, Singapore, Monaco, Dubai and Bengaluru. Caxton Associates’ primary business is to manage client and proprietary capital through a suite of products designed to fit the specific needs of investors. Employing a multi-portfolio manager framework, Caxton excels in discretionary global macro investing, leveraging its diversified expertise across asset classes and markets.

About the Role:

We are seeking a Security Engineer to join the Systems Engineering and Infrastructure team. The role will be focused on hardening, monitoring, and improving security across endpoints, servers, identity systems, and supporting infrastructure.

The successful candidate will play a key role in the team, contributing to the operational efficiency, reliability, and security of our Windows infrastructure.

Responsibilities:

- Manage and optimize Crowdstrike/Microsoft Defender (EDR/XDR) tooling, vulnerability scanners and patching processes using Intune / Ivanti Neurons or equivalent
- Implement and maintain Windows security controls (group policy, baseline OS hardening, endpoint protection, patching and logging)
- Continuously improve the core security controls that protect Windows/Linux systems across the organization
- Drive vulnerability management initiatives
- Monitor security alerts, investigate incidents and assist with remediation
- Support and improve identity and access management across the organisation (Active Directory, Azure AD, Conditional Access, Phishing-resistant MFA, SSO, SAML)
- Perform regular security assessments, configuration reviews, and compliance checks
- Develop and maintain security documentation, playbooks, and automation scripts (PowerShell / Python).
- Collaborate on architecture reviews and secure deployments
- Building automation around configuration, monitoring and incident response
- Email security and associated threat/detection controls
- Stay abreast of latest cyber threats, technologies and regulatory changes. Continuously assess and improve the organisation’s security posture
- Advocate for security best practices across all teams

Requirements

- Previous experience working in Financial Services (preferred)
- Proven experience as a Security Engineer or currently in a similar role
- Solid understanding of Zero Trust models/principles
- Solid understanding of host-based controls: application control / device control / encryption.
- Solid understanding and hands-on experience of Active Directory Services (EntraID/DNS/DHCP/FSMO/ADFS/SSO/ADCS/PKI/Group Policy)
- Solid understanding of networking concepts, including TCP/IP, LAN/WAN
- Scripting skills desirable (e.g. PowerShell, Batch scripting) for automating routine tasks and deployments
- Strong written, oral, and interpersonal communication skills
- Be able to communicate ideas in both technical and user-friendly language
- Highly self-motivated and directed, with a keen attention to detail
- Ability to manage time and prioritize tasks effectively in a fast-paced environment
- Strong collaborative skills with the ability to work effective in a team-oriented environment
- Displays and operates at the highest degree of ethics and integrity

Good to have:

- Hands-on experience of Windows Defender Application Control (WDAC) or third-party application/device-control platforms (desirable)
- Good knowledge of AWS Infrastructure and Linux administration (desirable)
- Experience with Microsoft Intune