Markets Product Security Engineer - UK

2 Months ago • All levels • Cyber Security

About the job

Job Description

This role requires deep knowledge of security principles, practices, and regulations, including NIST, ISO, and GDPR. Experience with security tooling, scripting, and incident management is crucial. You'll also need to be proficient in conducting risk assessments and providing post-event analyses.
Must have:
  • Information Security
  • Security Tooling
  • Risk Assessment
  • Incident Management
Good to have:
  • Threat Modeling
  • Cloud Security
  • Security Architecture
  • Python Scripting
Perks:
  • Global Footprint
  • Cutting Edge
Not hearing back from companies?
Unlock the secrets to a successful job application and accelerate your journey to your next opportunity.
The Role:

This is an amazing opportunity to work with Information Security and Compliance Team at ION. As a Product Security Engineer, you would be the key enabler of secure and compliant products. You should have knowledge of attack paths across the technology stack, including tactics, techniques and procedures (TTPs) used by adversaries to exploit vulnerabilities. You will be trusted advisor throughout the product development lifecycle, incorporating knowledge of emerging threats, business goals and system design to improve platform security posture. You will be responsible for aligning the Markets security strategy, security design and controls engineering to product roadmap. You will also be responsible for providing transparency to leadership on product control performance and associated risk.

Key Responsibilities:

    • Within the Product Security Team as part of the ION Markets CISO function, you will deal with the following activities:
    • Monitor and identify security events and emerging threats associated with the product line you are managing and any dependencies;
    • Act as the interface between CSIRT and Product teams as part of security incident activities;
    • Deliver threat modelling and hunting to identify vulnerabilities in product design and provide control recommendations to mitigate those risks;
    • Engage in architecture and design reviews to ensure product alignment with Security strategy and industry best practices;
    • Stay up to date with industry trends, best practices and regulatory standards that may impact product implementations;
    • Support the engineering of control solutions where existing offerings are not available;
    • Provide security expertise during incident and problem management.
    • Produce threat intelligence briefings and other work products to share information across the organisation
    • Respond to ad-hoc requests for platform security related guidance
    • This role may require some overnight, weekend and on-call activities.

Required Skills, Qualifications and Experience:

    • Knowledge of:
    •  
    • Working within the financial services industry, or other highly regulated industries in a technical role.
    • Information security management, governance, and compliance principles, practices, laws, rules and regulations, e.g. NIST, ISO, NIS, DORA and GDPR;
    • Information technology systems and processes, network infrastructure, data architecture, data processes and protocols;
    • Cyber and cloud security standard frameworks, architecture, design, operations, controls, technology, solutions, and service orchestration, e.g. CIS, CSF;

    • Skills in:
    •  
    • Security Tooling: Proficiency in common security tools, such as SIEMs, vulnerability scanners, firewalls and EDR products;
    • Scripting: Proficiency in scripting languages like Python, BASH, or PowerShell;
    • Security Incident Management: Ability to assist with the detection, response, and recovery of escalated security incidents and manage backlog/lessons learned actions;
    • Risk Assessment: Proficiency in conducting security risk assessments and providing thorough post-event analyses;
    • Security Expertise: Providing security expertise during incident and problem management;
    • Communication: Strong communication skills to explain complex security issues to both technical and non-technical audiences.
    •  
    • Ability to:

    • Effectively communicate technical issues to diverse audiences, both in writing and verbally;
    • Handle sensitive and confidential matters, situations, and data;
    • Understand and follow broad and complex instructions;
    • Comprehend technical language and to confer, analyse and write in an objective, lucid manner;
    • Work independently and prioritize multiple tasks and adapt to needed changes;
    • Remain calm under high pressure/difficult situations.
About us:

We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.

• Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.
• Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.

ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe. Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.

ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.
ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.
View Full Job Description

Add your resume

80%

Upload your resume, increase your shortlisting chances by 80%

About The Company

We’re visionary innovators who are delivering mission-critical trading and workflow automation software to financial institutions, corporations, central banks, and governments. By combining our passion for automation with a strategic view on the industries we serve, we design solutions that improve decision-making, simplify complex processes, and empower people. Simply put, we help our customers do more, faster and better than before. We believe our investments in research and development are shaping the future of automation and enabling our customers to transform their business. And we embrace the power of community, working with each other and with our customers to succeed through a positive culture of continuous improvement.

New York, New York, United States (Hybrid)

Noida, Uttar Pradesh, India (On-Site)

New York, New York, United States (Hybrid)

New York, New York, United States (Hybrid)

New York, New York, United States (Hybrid)

New York, New York, United States (Hybrid)

New York, New York, United States (On-Site)

New York, New York, United States (On-Site)

Tokyo, Japan (On-Site)

Budapest, Hungary (On-Site)

View All Jobs

Get notified when new jobs are added by Ion

Similar Jobs

Ajmera Infotech - Kubernetes Experts

Ajmera Infotech, India (On-Site)

Axinous - Site Reliability Engineering Intern

Axinous, United States (On-Site)

Gaming Innovation Group  - Infrastructure Engineer

Gaming Innovation Group , (Hybrid)

Trendyol - Network Security Engineer

Trendyol, Türkiye (Hybrid)

ByteDance - AI Security Researcher - Security Flow

ByteDance, United States (On-Site)

Anavation - Senior Cyber Advisor

Anavation, United States (On-Site)

Get notifed when new similar jobs are uploaded

Similar Skill Jobs

IGT - Systems Engineer IV

IGT, United States (On-Site)

Visa - Associate Tech Support Analyst

Visa, United States (On-Site)

Playrix - Lead QA Engineer (Resources Team)

Playrix, Kazakhstan (Remote)

Moon Active - Infrastructure Engineering Team Leader

Moon Active, Israel (On-Site)

Maxis Studios - Backend Software Engineer

Maxis Studios, Canada (On-Site)

Playtika - Application Security Researcher

Playtika, Israel (On-Site)

Get notifed when new similar jobs are uploaded

Jobs in London, England, United Kingdom

Fanatics - Aston Villa, Sales Assistant (Match Day)

Fanatics, United Kingdom (On-Site)

BigID - Manager, Technical Client Support - EMEA/APJ

BigID, United Kingdom (Remote)

Rocket - Senior Software Architect

Rocket, United Kingdom (On-Site)

Tencent - (Senior) Procurement Manager, Game Marketing

Tencent, United Kingdom (On-Site)

Team17 - Senior Producer

Team17, United Kingdom (Hybrid)

Keywords Studios (Player Support) - Senior Technical Designer at The Multiplayer Group (MPG)

Keywords Studios (Player Support), United Kingdom (Remote)

Eleven Labs - Head of Performance Marketing

Eleven Labs, United Kingdom (Remote)

HP - Sr. Sales Manager Global Channel Partner

HP, United Kingdom (On-Site)

Sitetracker - Account Manager

Sitetracker, United Kingdom (Hybrid)

Nagarro - Principal Engineer

Nagarro, United Kingdom (Remote)

Get notifed when new similar jobs are uploaded

Cyber Security Jobs

Get notifed when new similar jobs are uploaded