CMG (Capital Markets Gateway)

Security Engineer

• Lead threat modeling across products, infrastructure, and new initiatives, identifying and prioritizing risks, attack surfaces, and vulnerabilities.
• Conduct security risk assessments and translate findings into pragmatic, risk-based remediation prioritized by impact and blast radius.
• Run security design and architecture reviews, partnering with Engineering and DevOps to reduce risk through secure design and simplicity, not just added controls.
• Partner on customer due-diligence (DDQ) and SOC 2 Type II evidence gathering, keeping compliance sustainable rather than fire-drilled.
• Build repeatable security workflows that embed controls into existing engineering processes instead of creating parallel ones.
• Develop and maintain clear, role-relevant security policies, standards, and procedures, and drive consensus without direct authority.
• Understand and implement controls for supply-chain risk and vulnerability management, including CI/CD enforcement and dependency hygiene, and build vulnerability triage workflows that score real risk by exploitability, reachability, and compensating controls rather than raw CVSS.
• Harden and secure our cloud environment (Azure), partnering with platform engineering on secure configuration, reviewing and remediating vulnerabilities, identity and network controls, posture management, and logging and detection.
• Strengthen endpoint and identity controls across a global, remote workforce: least privilege, phishing-resistant MFA, and privileged access controls.
• Support detection and response, partnering with our DFIR and MDR relationships and helping mature toward a proactive posture.
• Address AI security risks (prompt injection, data poisoning, model and agent governance) and help keep AI controls ahead of adoption.
• Take ownership of large, loosely defined initiatives and drive them from problem framing to operationalized program.
• Work closely with senior leadership across the firm, bringing structure to ambiguity and sequencing work against risk.
• Surface risk early, challenge assumptions, and communicate clearly to both technical teams and senior stakeholders.

Senior Security Engineer

DevOps Engineer

• Design, implement, and maintain monitoring and observability solutions using tools like Prometheus, Grafana Stack (Loki/Grafana/Tempo/Alert Manager), Datadog, and OpenTelemetry.
• Define and implement SLOs, SLIs, and error budgets to measure system reliability.
• Develop and optimize dashboards, alerts, and reports for system performance and business metrics.
• Design actionable alerting strategies to minimize noise and improve MTTR.
• Integrate alerting systems with Jira.
• Establish and refine runbooks for on-call teams to handle alerts efficiently.
• Empower teams to ensure observability coverage and incident response practices.
• Analyze system performance metrics, identify bottlenecks, and implement optimizations to improve system efficiency, scalability, and cost-effectiveness.
• Help conduct load testing and capacity planning to ensure systems can handle peak traffic loads.
• Identify opportunities for automation and develop tools to streamline operational processes, such as fail-over, configuration management, and monitoring.
• Implement monitoring and alerting systems within automations to detect and resolve issues proactively.
• Collaborate closely with cross-functional teams, including software engineers, operations, and infrastructure teams, to understand system requirements, provide technical guidance, and drive solutions.
• Communicate effectively to stakeholders about system changes, incidents, and improvements.
• Foment and spread SRE principles and practices across company.

Site Reliability Engineer

• Design, implement, and maintain monitoring and observability solutions using tools like Prometheus, Grafana Stack (Loki/Grafana/Tempo/Alert Manager), Datadog, and OpenTelemetry.
• Define and implement SLOs, SLIs, and error budgets to measure system reliability.
• Develop and optimize dashboards, alerts, and reports for system performance and business metrics.
• Design actionable alerting strategies to minimize noise and improve MTTR.
• Integrate alerting systems with Jira.
• Establish and refine runbooks for on-call teams to handle alerts efficiently.
• Empower teams to ensure observability coverage and incident response practices.
• Analyze system performance metrics, identify bottlenecks, and implement optimizations to improve system efficiency, scalability, and cost-effectiveness.
• Help conduct load testing and capacity planning to ensure systems can handle peak traffic loads.
• Identify opportunities for automation and develop tools to streamline operational processes, such as fail-over, configuration management, and monitoring.
• Implement monitoring and alerting systems within automations to detect and resolve issues proactively.
• Collaborate closely with cross-functional teams, including software engineers, operations, and infrastructure teams, to understand system requirements, provide technical guidance, and drive solutions.
• Communicate effectively to stakeholders about system changes, incidents, and improvements.
• Foment and spread SRE principles and practices across the company.

Platform Engineer

• Design and implement tools and technologies to provision and configure an enterprise software system hosted in Kubernetes
• Design and implement architecture and networking solutions within Azure
• Automate/script existing processes using languages such as python and bash
• Provision, configure, and maintain cloud resources using Terraform and Terragrunt
• Actively monitor the application environment and respond to incidents
• Conduct root cause analysis for production incidents
• Oversee cloud infrastructure and recommend any potential improvements to technology or process
• Contribute to team planning to solve engineering challenges
• Be a dependable and highly skilled development resource for peers through education and review
• Have a broad awareness of related projects and industry trends, and encourage innovative practices among peers
• Provide detailed feedback and suggestions to team code reviews
• Document and demonstrate solutions through written documentation, diagrams, and readable code