Platform Compliance Engineer

Responsibilities

• Compliance & Hardening • Assess and maintain Enterprise Linux and Windows systems against current CIS Benchmark standards • Develop, update, and maintain hardening baselines and compliance policies as CIS recommendations evolve • Run regular compliance scans, track drift, and report on compliance posture across the fleet • Document exceptions and compensating controls where full compliance isn't feasible, with appropriate risk sign-off
• Vulnerability & Patch Management • Monitor vulnerability feeds and scan findings to identify critical vulnerabilities requiring emergency patching • Own the end-to-end process for expedited patching of critical/high-severity vulnerabilities, including testing, deployment, and validation • Maintain a regular patch cycle for standard/lower-severity vulnerabilities across Linux and Windows environments • Track patch compliance SLAs and report on remediation timelines and outstanding exposure •Continuously improve processes to reduce manual effort and mean-time-to-remediate
• Cross-Team Collaboration •Partner with Linux and Windows platform teams to plan, test, and roll out patches and hardening changes with minimal disruption •Work with security teams to prioritize remediation based on risk, exploitability, and business impact •Participate in vulnerability triage and incident response when critical issues are identified •Communicate compliance status, risks, and remediation plans to stakeholders and leadership •Act as the primary point of contact during audits, preparing and collecting evidence and providing validation or proof of compliance as required
• What you can expect from us:
• Real Impact: By integrating sophisticated coding techniques with innovative engineering ideas, we design and optimize systems that can process massive amounts of data while still ensuring high performance and stability. You’ll see how your contributions towards developing and supporting leading-edge hardware and software technologies make a firm-wide impact that makes us all smarter, faster, and better.
• Collaboration: You will work closely with IT, legal, and compliance teams to address security risks, ensure adherence to internal policies, and meet regulatory requirements. Champion cybersecurity awareness and training initiatives across the organization.
• Growth: For many of our roles, we don’t expect you to have prior industry experience in proprietary trading or financial services to succeed at Susquehanna International Group. We’re looking for people who are naturally curious, relentless problem solvers, and have the desire to continuously innovate, learn, and grow.