Information Security Engineer

The information security team is responsible for protecting IMC’s intellectual property, IT infrastructure and business operations against external and internal threats. We work closely with technology, risk, compliance, internal audit and business leaders to reduce cyber risk to acceptable levels. We are looking for an Information Security Engineer to grow and mature our Security Operations Center function that uses EDR, SIEM, SOAR, CSPM, IAM, firewalls, NIDS/NIPS and various other security controls. We offer an environment that allows you to broaden and deepen your information security knowledge and skills, with access to advanced security technology, frequent training and a culture of knowledge sharing. As you gain experience with our existing SOC technology and processes, you will be given a lot of freedom to further mature the SOC with your own initiatives.

• →Analyse security logs, alerts and reported events. Respond to or assist with the remediation of incidents
• →Using various threat intelligence sources, hunt for potential compromise across the infrastructure
• →Report discovered vulnerabilities to technology owners and suggest remediation steps
• →Support and improve technical security controls
• →Leverage automation and orchestration solutions to automate repetitive tasks
• →Leverage AI-assisted tooling to enhance alert triage, event summarisation, and investigation workflows, with a pragmatic view of its limitations
• →Develop reporting for assessing the effectiveness of security controls
• →Develop and improve incident response playbooks

• Relevant tertiary and/or security qualifications with previous SOC experience and/or 3+ years of hands-on experience in an enterprise IT environment, managing endpoints and applications on-prem or in the cloud
• Strong analytical and problem-solving skills
• Self-starter and a passion for cybersecurity
• Exposure to security controls like identity and access management, vulnerability management, endpoint detection and response
• Automation using basic coding skills or low code / no code automation tools
• Awareness of AI and machine learning applications in security operations is a plus; any hands-on experience with AI-assisted security tooling or LLM-based workflows is highly regarded.
• Understanding of common attack techniques and frameworks such as MITRE ATT&CK

IMC is a global trading firm powered by a cutting-edge research environment and a world-class technology backbone. Since 1989, we’ve been a stabilizing force in financial markets, providing essential liquidity upon which market participants depend. Across our offices in the US, Europe, Asia Pacific, and India, our talented quant researchers, engineers, traders, and business operations professionals are united by our uniquely collaborative, high-performance culture, and our commitment to giving back. From entering dynamic new markets to embracing disruptive technologies, and from developing an innovative research environment to diversifying our trading strategies, we dare to continuously innovate and collaborate to succeed.