Client Platforms Security Engineer

DRW is a diversified trading firm with over 3 decades of experience bringing sophisticated technology and exceptional people together to operate in markets around the world.

We value autonomy and the ability to quickly pivot to capture opportunities, so we operate using our own capital and trading at our own risk.

Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets.

We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.

We operate with respect, curiosity and open minds.

The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it.

DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus.

We are seeking a Client Platforms Security Engineer to work with the members of the security team to ensure that our client platform infrastructure, virtual or physical, is properly protected.

You will engineer, maintain and implement security controls, audit configurations in a hybrid compute environment.

You will generally ensure we are reducing risk footprint across the infrastructure without impacting its effectiveness.

A successful candidate will have an attention to detail, the ability to understand what impact their changes will have on the business teams and the services they use.

What you’ll be doing:

• Maintain security tools and their associated configurations
• Manage and coordinate updates of tools when new versions are released
• Working with platform teams to deploy tools and changes as necessary after validating necessary performance and functionality requirements
• Identify solutions in the market and test them to see if they prove viable for our environment and use case
• Work with the platform teams to ensure the OS builds are as hardened to the extent they can be
• Identify and document ways to measure effectiveness of the client platform controls
• Assess risk in our client platform environment and provide mitigations for those risks
• Identify process improvements for automation of security hardening checks on client platforms