Client Platforms Security Engineer

Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital and cryptoassets.

We operate with respect, curiosity and open minds. The people who thrive here share our belief that it’s not just what we do that matters–it's how we do it. DRW is a place of high expectations, integrity, innovation and a willingness to challenge consensus.

We are seeking a  Client Platforms Security Engineer to work with the members of the security team to ensure that our client platform infrastructure, virtual or physical, is properly protected. You will engineer, maintain and implement security controls, audit configurations in a hybrid compute environment. You will generally ensure we are reducing risk footprint across the infrastructure without impacting its effectiveness. A successful candidate will have an attention to detail, the ability to understand what impact their changes will have on the business teams and the services they use.

• Maintain security tools and their associated configurations  
• Manage and coordinate updates of tools when new versions are released  
• Working with platform teams to deploy tools and changes as necessary after validating necessary performance and functionality requirements  
• Identify solutions in the market and test them to see if they prove viable for our environment and use case 
• Work with the platform teams to ensure the OS builds are as hardened to the extent they can be  
• Identify and document ways to measure effectiveness of the client platform controls  
• Assess risk in our client platform environment and provide mitigations for those risks  
• Identify process improvements for automation of security hardening checks on client platforms  
• Work with the operation teams internal and external to ensure identified risks are triaged, investigated, and remediated as necessary 

• Strong verbal, written, and interpersonal communication skills  
• Bachelor’s degree or relevant work experience required  
• Scripting/Development experience in any high-level language with the desire to build upon that repertoire  
• Experience maintaining client OS platforms (e.g Windows, Linux, MacOS) in a physical and virtual world. 
• Understanding of network fundamentals and protocols. 
• Deep technical understanding of client OS platforms (e.g Windows, Linux, MacOS). Mobile OS platforms a plus (e.g. iOS, Android, etc) 
• Experience with endpoint security suites and frameworks (e.g. Anti-Virus, EDR/XDR, execution flow control, etc) 
• Strong, demonstrable experience in Cybersecurity engineering, design, implementation and documentation  
• Experience with leading SOAR and SIEM solutions 

• Experience managing platforms like CrowdStrike, Sentinel One, or Carbon Black App Control 
• Experience working with Qualys and a general understanding of vulnerability management processes
• Experience scripting with languages like Python, Powershell, and the Linux Shell