Client Platforms Security Engineer
Cumberland provides institutional OTC liquidity and market-making services for digital assets, offering 24/7 access to deep cryptocurrency and stablecoin markets.
About Cumberland
Cumberland provides liquidity solutions for institutional investors in the cryptoasset space through OTC spot trading, exchange-traded derivatives, bilateral options, and non-deliverable forwards. Founded as the crypto division of DRW Holdings, Cumberland operates globally with offices in Chicago, London, and Singapore, offering 24/7 trading access through voice markets, electronic platforms, and API connections.
Skills
About the Role
You will work with members of the security team to ensure that client platform infrastructure, virtual or physical, is properly protected. You will engineer, maintain and implement security controls and audit configurations in a hybrid compute environment. You will maintain security tools and their configurations, manage and coordinate updates when new versions are released, and work with platform teams to deploy tools and changes after validating performance and functionality requirements. You will identify solutions in the market and test them for viability, help harden OS builds, and document ways to measure the effectiveness of client platform controls. You will assess risk in the client platform environment and provide mitigations, identify process improvements for automating security hardening checks, and work with internal and external operations teams to ensure identified risks are triaged, investigated and remediated.
Requirements
- Strong verbal, written and interpersonal communication skills
- Bachelor's degree or relevant work experience
- Scripting/development experience in any high-level language
- Experience maintaining client OS platforms (Windows, Linux, MacOS) in physical and virtual environments
- Understanding of network fundamentals and protocols
- Deep technical understanding of client OS platforms (Windows, Linux, MacOS); mobile OS platforms (iOS, Android) a plus
- Experience with endpoint security suites and frameworks (Anti-Virus, EDR/XDR, execution flow control)
- Strong, demonstrable experience in cybersecurity engineering, design, implementation and documentation
- Experience with leading SOAR and SIEM solutions
- Bonus: experience managing platforms like CrowdStrike, SentinelOne or Carbon Black App Control
- Bonus: experience working with Qualys and understanding of vulnerability management processes
- Bonus: experience scripting with Python, PowerShell and the Linux Shell
Responsibilities
- Maintain security tools and their associated configurations
- Manage and coordinate updates of tools when new versions are released
- Work with platform teams to deploy tools and changes after validating performance and functionality requirements
- Identify solutions in the market and test them for viability for the environment and use case
- Work with platform teams to ensure OS builds are hardened to the extent possible
- Identify and document ways to measure effectiveness of client platform controls
- Assess risk in the client platform environment and provide mitigations
- Identify process improvements for automation of security hardening checks on client platforms
- Work with internal and external operations teams to ensure identified risks are triaged, investigated and remediated
Benefits
- Annual discretionary bonus
- Group medical insurance
- Pharmacy insurance
- Dental insurance
- Vision insurance
- 401k with discretionary employer match
- Short and long-term disability insurance
- Life and AD&D insurance
- Health savings accounts
- Flexible spending accounts
