Principle Windows Security Engineer

Principle IT Security Engineer – Windows, Automation, Endpoint Security

London – Hybrid

Industry Leading Compensation

Quant Capital is partnered with a leading trading firm looking to hire an IT Security Engineer to strengthen their global security posture. This role sits inside a high-performing engineering group and suits someone who can own technical decisions, cut through noise, and build security controls that scale.

You’ll work across Windows engineering, endpoint security, automation, vulnerability management and platform hardening. Expect a mix of hands-on engineering, advisory work, and proactive threat mitigation. The environment is fast-moving and technically demanding - you’ll be the person the wider IT team turns to for sound judgement and clarity.

What you’ll be doing

• Designing and implementing security controls across Windows platforms
• Driving vulnerability management initiatives and closing out remediation at scale
• Building automation around configuration, monitoring, and incident response
• Improving endpoint security: EDR, AV, patching, OS hardening
• Working with core infrastructure (AD / Entra ID, PKI, networking)
• Investigating emerging threats and advising on technical risk
• Supporting global IT teams across a large distributed environment

What you’ll need

• Strong Windows security engineering experience
• Solid understanding of host-based controls: application control, firewalling, logging, encryption
• Hands-on with endpoint protection, EDR, scanning and patching tools
• Experience with OS hardening, privileged access concepts, identity and security best practice
• Knowledge of common attack techniques and how to counter them
• Good grasp of Active Directory/Entra ID and PKI
• High level PowerShell programming skills
• Clear communicator, reliable, collaborative, able to influence technical decisions

This role suits someone who wants real ownership, thrives under pressure, and enjoys solving complex security problems at scale.

Discretion guaranteed - we never share profiles without your approval.