Security Engineer

Hudson River Trading (HRT) is seeking a curious, innovative Security Engineer to join our Enterprise Security team and help safeguard the infrastructure behind one of the world’s most demanding trading environments, with a focus on both performance and resilience. This role spans system hardening across infrastructure and Windows, Linux, and macOS endpoints, ownership of a comprehensive vulnerability management program, securing SaaS deployments, maintaining an enterprise-grade open source PKI platform, and strengthening identity and access management.You will have significant autonomy to shape HRT’s global cybersecurity systems, building solutions that scale without compromising performance. The role requires broad experience across enterprise security domains and a pragmatic approach to integrating security into development workflows, emphasizing defense-in-depth while minimizing friction for developers.ResponsibilitiesApply security baselines and harden systems across a diverse fleet of enterprise endpoints and servers (Windows, Linux, macOS)Own and evolve our vulnerability management program, including risk prioritization and remediation workflowsDesign and operate Identity and Access Management (IAM) solutions at enterprise scaleSecure and manage key enterprise SaaS platforms and their security controlsBuild and scale an enterprise-grade public key infrastructure (PKI)Leverage configuration management and infrastructure as code to enforce security controls, prioritizing automation over manual processesQualifications5+ years of experience in security engineeringProficiency in PythonExperience hardening enterprise endpoints across Windows, Linux, and macOSStrong experience with vulnerability management tools and processes, including risk prioritization and remediation workflowsExperience securing and managing enterprise SaaS platformsExperience designing and operating Public Key Infrastructure (PKI) systems (Smallstep a plus)Experience designing and maintaining Identity and Access Management (IAM) solutionsExperience integrating security into CI/CD pipelines and building automated controls for infrastructureFamiliarity with software supply chain securityThe estimated base salary range for this position is 150,000 - 250,000 USD per year (or local equivalent). The base pay offered may vary depending on multiple individualized factors, including location, job-related knowledge, skills, and experience. This role will also be eligible for discretionary performance-based bonuses and a competitive benefits package.CultureHudson River Trading (HRT) brings a scientific approach to trading financial products. We have built one of the world's most sophisticated computing environments for research and development. Our researchers are at the forefront of innovation in the world of algorithmic trading. At HRT we welcome a variety of expertise: mathematics and computer science, physics and engineering, media and tech. We’re a community of self-starters who are motivated by the excitement of being at the cutting edge of automation in every part of our organization—from trading, to business operations, to recruiting and beyond. We value openness and transparency, and celebrate great ideas from HRT veterans and new hires alike. At HRT we’re friends and colleagues – whether we are sharing a meal, playing the latest board game, or writing elegant code. We embrace a culture of togetherness that extends far beyond the walls of our office.Feel like you belong at HRT? Our goal is to find the best people and bring them together to do great work in a place where everyone is valued. HRT is proud of our diverse staff; we have offices all over the globe and benefit from our varied and unique perspectives. HRT is an equal opportunity employer; so whoever you are we’d love to get to know you.Please be advised: Use of AI tools during interviews or assessments is strictly prohibited, unless otherwise instructed or agreed upon. We employ various methods to evaluate the authenticity of candidate responses. If we determine that AI assistance was used during any stage of the hiring process, we reserve the right to immediately disqualify your candidacy or rescind any job offers extended.