Security Engineer

About Caxton Associates:
Caxton Associates, founded in 1983, is a global trading and investment firm with offices in London, New York, Singapore, Monaco, Dubai and Bengaluru. Caxton Associates’ primary business is to manage client and proprietary capital through a suite of products designed to fit the specific needs of investors. Employing a multi-portfolio manager framework, Caxton excels in discretionary global macro investing, leveraging its diversified expertise across asset classes and markets.
About the Role:
We are seeking a Security Engineer to join the Systems Engineering and Infrastructure team. The role will be focused on hardening, monitoring, and improving security across endpoints, servers, identity systems, and supporting infrastructure.
The successful candidate will play a key role in the team, contributing to the operational efficiency, reliability, and security of our Windows infrastructure.
Responsibilities:
Manage and optimize Crowdstrike/Microsoft Defender (EDR/XDR) tooling, vulnerability scanners and patching processes using Intune / Ivanti Neurons or equivalent
Implement and maintain Windows security controls (group policy, baseline OS hardening, endpoint protection, patching and logging)
Continuously improve the core security controls that protect Windows/Linux systems across the organization
Drive vulnerability management initiatives
Monitor security alerts, investigate incidents and assist with remediation
Support and improve identity and access management across the organisation (Active Directory, Azure AD, Conditional Access, Phishing-resistant MFA, SSO, SAML)
Perform regular security assessments, configuration reviews, and compliance checks
Develop and maintain security documentation, playbooks, and automation scripts (PowerShell / Python).
Collaborate on architecture reviews and secure deployments
Building automation around configuration, monitoring and incident response
Email security and associated threat/detection controls
Stay abreast of latest cyber threats, technologies and regulatory changes. Continuously assess and improve the organisation’s security posture
Advocate for security best practices across all teams
Requirements
Previous experience working in Financial Services (preferred)
Proven experience as a Security Engineer or currently in a similar role
Solid understanding of Zero Trust models/principles
Solid understanding of host-based controls: application control / device control / encryption.
Solid understanding and hands-on experience of Active Directory Services (EntraID/DNS/DHCP/FSMO/ADFS/SSO/ADCS/PKI/Group Policy)
Solid understanding of networking concepts, including TCP/IP, LAN/WAN
Scripting skills desirable (e.g. PowerShell, Batch scripting) for automating routine tasks and deployments
Strong written, oral, and interpersonal communication skills
Be able to communicate ideas in both technical and user-friendly language
Highly self-motivated and directed, with a keen attention to detail
Ability to manage time and prioritize tasks effectively in a fast-paced environment
Strong collaborative skills with the ability to work effective in a team-oriented environment
Displays and operates at the highest degree of ethics and integrity
Good to have:
Hands-on experience of Windows Defender Application Control (WDAC) or third-party application/device-control platforms (desirable)
Good knowledge of AWS Infrastructure and Linux administration (desirable)
Experience with Microsoft Intune

Skills
Python, Linux, AWS, Azure, Documentation

Work arrangement
No