9 hours ago
London, United KingdomSenior
Responsibilities
- Engineer security products and configure security controls for production use, anomaly detection, incident identification, network intrusion detection, and malware detection.
- Administer privileged access capabilities, including account onboarding, safes, platforms, policies, credential rotation, session management, access workflows, troubleshooting, and control monitoring.
- Improve identity security, secrets management, key management, PKI, certificate controls, access governance, least-privilege processes, access reviews, and privileged account lifecycle management.
- Develop and document cyber security standards, procedures, operational metrics, control reporting, and audit evidence.
- Collaborate with technology and IT teams on incident handling, patching, system hardening, deployment, operation, and continual improvement of security solutions.
- Automate security tasks, create analytical tools, improve tooling integrations and threat detection capabilities, and support threat intelligence and hunting.
- Investigate and respond to security incidents and exceptions while supporting broader cyber security engineering priorities.
- Comply with applicable regulatory, operational risk, conduct, and internal policy requirements.
Requirements
- At least five years of information security experience; candidates with less than five years may still be considered.
- Comprehensive knowledge of identity security and access-control technologies, including Entra ID, Identity Protection, Privileged Access Management, Secrets Management, Key Management, PKI, and Certificate Management.
- Strong hands-on experience administering and supporting a Privileged Access Management solution such as CyberArk or an equivalent.
- Hands-on experience with Windows, Linux, cloud platforms, databases, directory services, and service accounts from an identity-security perspective.
- Experience with secrets and key-management tools such as HashiCorp Vault or Conjour, or equivalent tools.
- Strong experience with PKI management tools such as Venafi or DigiCert, or equivalent tools.
- Experience with identity and privileged-access governance, least privilege, break-glass processes, access reviews, privileged-account lifecycle management, operational metrics, control reporting, and audit evidence.
- Knowledge of vulnerability management, penetration testing, incident response, security control assurance, and security standards such as CIS and NIST.
- Experience supporting or improving security platforms, automation, tooling integrations, detection capabilities, or operational security processes.
- Excellent communication, collaboration, relationship-building, influencing, analytical, and organizational skills.
Benefits
- Inclusive employer committed to accessible recruitment and reasonable adjustments.
- Professional development and stretch opportunities within a collaborative global security team.
- Global financial-services environment with exposure to diverse cyber security and identity-security capabilities.
About Marex
Marex (Nasdaq: MRX) is a diversified financial services platform that provides liquidity, market access, and trading infrastructure across energy, commodities, and financial markets. Its businesses span clearing, agency and execution, market making, and hedging and investment solutions for producers, consumers, traders, banks, hedge funds, and asset managers. Headquartered in New York with 40+ offices and connectivity to about 60 exchanges, it operates globally as a public company.