Client Platforms Security Engineer
Global principal trading firm; parent of Cumberland (crypto market maker).
About DRW
DRW (drw.com) is a Chicago-based global principal trading firm across asset classes; its crypto arm is Cumberland, a leading digital-asset market maker.
Skills
Candidate Availability
Required and preferred rules are kept separate and reflect the wording in the original posting.
About the Role
You will work with members of the security team to ensure that client platform infrastructure, virtual or physical, is properly protected. You will engineer, maintain and implement security controls and audit configurations in a hybrid compute environment. You will maintain security tools and their configurations, coordinate updates, deploy validated changes, harden OS builds, measure control effectiveness, assess and mitigate risk, automate security hardening checks, and ensure risks are triaged, investigated and remediated.
Requirements
- Strong verbal, written and interpersonal communication skills
- Bachelor's degree or relevant work experience
- Scripting/development experience in any high-level language
- Experience maintaining client OS platforms including Windows, Linux and macOS in physical and virtual environments
- Understanding of network fundamentals and protocols
- Deep technical understanding of Windows, Linux and macOS client platforms; mobile OS experience is a plus
- Experience with endpoint security suites and frameworks such as Anti-Virus, EDR/XDR and execution flow control
- Strong, demonstrable experience in cybersecurity engineering, design, implementation and documentation
- Experience with leading SOAR and SIEM solutions
- Bonus: experience managing CrowdStrike, SentinelOne or Carbon Black App Control
- Bonus: experience with Qualys and vulnerability management processes
- Bonus: experience scripting with Python, PowerShell and Linux Shell
Responsibilities
- Maintain security tools and their associated configurations
- Manage and coordinate updates of tools when new versions are released
- Work with platform teams to deploy tools and changes after validating performance and functionality requirements
- Identify solutions in the market and test them for viability for the environment and use case
- Work with platform teams to ensure OS builds are hardened to the extent possible
- Identify and document ways to measure effectiveness of client platform controls
- Assess risk in the client platform environment and provide mitigations
- Identify process improvements for automation of security hardening checks on client platforms
- Work with internal and external operations teams to ensure identified risks are triaged, investigated and remediated
Benefits
- Annual discretionary bonus
- Group medical insurance
- Pharmacy insurance
- Dental insurance
- Vision insurance
- 401k with discretionary employer match
- Short and long-term disability insurance
- Life and AD&D insurance
- Health savings accounts
- Flexible spending accounts
