{"id":2504637,"url":"https://alion.io/job/intropic-io-security-engineer","title":"Security Engineer","company":{"id":3908758,"name":"Intropic.io","domain":"intropic.io","url":"https://alion.io/company/intropic","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Lever","truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":59000,"max_usd":141000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":629},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Amazon EC2","optional":false},{"name":"Amazon EKS","optional":false},{"name":"AWS","optional":false},{"name":"CI/CD","optional":false},{"name":"Claude Code","optional":false},{"name":"GCP","optional":false},{"name":"GitLab","optional":false},{"name":"Google Workspace","optional":false},{"name":"OpenAI Codex","optional":false},{"name":"SOC 2","optional":false},{"name":"Windows","optional":false},{"name":"Amazon ECS","optional":true},{"name":"Amazon S3","optional":true},{"name":"AWS Lambda","optional":true},{"name":"Git","optional":true},{"name":"Kubernetes","optional":true},{"name":"Python","optional":true},{"name":"SQL","optional":true}],"status":"live","first_seen_at":"2026-08-28T08:16:19Z","employer_posted_date":"2026-08-28","last_verified_at":"2026-10-14T15:07:57Z","board_verified":true,"closed_at":null,"days_open":47,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":47},"description":"Who We Are\nIntropic is a financial information and software company operating at the cutting edge of global capital markets. We pair modern technology (elastic cloud infrastructure and agentic AI systems) with deep market expertise to build information products that the world's most sophisticated financial institutions rely on every day. Our clients include hedge funds, proprietary trading firms, index fund managers, large asset managers, sovereign wealth funds, and investment banks, who use our products to generate alpha, manage risk, and make better decisions in fast-moving markets. We're best known for our Index Rebalance Forecast products, and we're now extending that edge into several other strategies. Headquartered in London's Canary Wharf and expanding globally, we're a team that moves fast, takes real ownership, and holds itself to a high standard of rigour and integrity.\nThe Role\nYou will own the entire security stack at Intropic. Cloud, endpoints, detection and response, compliance, IT, and the security of our growing AI agent usage all sit with you. You set the priorities, you do the work, and you answer for the results.\nThis suits someone who would enjoy the opportunity to lead security at a growing FinTech, rather than operating with small scope in a large team. On a given week you might harden an EKS cluster, tune a detection, scope a pentest, and work out how to give engineers safe access to coding agents. The AI security work in particular is a largely unsolved, very interesting problem, and you will define our approach to it. The role includes out-of-hours response to security alerts.\nThis role is suitable for someone with 3+ years of experience in security.\nResponsibilities\nSecurity Engineering - 60%\nEngineer and manage the security of our cloud infrastructure across AWS and GCP, from individual EC2 instances to a large EKS microservice estate.\n\nRun detection and response: triage alerts, expand coverage, and keep the tooling honest. If a true positive alert fires at 9pm and it matters, you are the person who handles it.\n\nThreat model new products and services before they ship, and embed security checks directly into CI/CD.\n\nDefine what good looks like when it comes to the security of our external SaaS app integrations. This might look like building out an apporval workflow to approve new OAuth connections for our Google accounts.\n\nSecure our use of AI agents (Claude Code, Codex, and similar) and our production generative AI systems, both client facing and internal. Work with each business unit to find mitigations that protect the company without slowing it down.\n\nEstablish an automated patching system for systems across every part of our cloud.\n\nGRC - 20%\nOwn SOC 2. Run the yearly Type II audit, scope the annual web application pentest, and automate as much of the evidence collection in Drata as you can.\n\nEvaluate where gaps exist in our security policies and build out new policies to fill those gaps.\n\nIT - 20%\nAssist with running onboarding and offboarding for joiners and leavers, building any automation that makes both fast and complete.\n\nAssist with managing our fleet of roughly 100 endpoints through Jamf and Intune (about 90% macOS, 10% Windows).\n\nRespond to colleagues' security and IT access questions, and resolve them quickly and courteously.\n\nOwn and manage our core SaaS estate, including Google Workspace and GitLab access, scripting away the repetitive parts.\n\nRequirements\n3+ years security experience spanning multiple domains. You don’t have to have directly led a team before although it would be a plus.\n\nAdvanced, hands-on knowledge of a wide range of AWS services, including but not limited to EC2, S3, GuardDuty, Lambda, ECS, and EKS\n\nPractical experience with Kubernetes, ideally EKS.\n\nExperience threat modelling web applications and responding to real security incidents.\n\nExperience using AI agents, in your own workflow or in security tooling.\n\nUnderstanding of SOC 2 and comfort with Git.\n\nWorking knowledge of Jamf.\n\nSolid scripting ability in Python or Bash, enough to automate a repetitive task and glue two systems together through their APIs\n\nWillingness and interest in learning and upskilling in areas of security, IT, or GRC you have not encountered before.\n\nAbility to pivot quickly between different domains while keeping a high attention to detail and courteousness to end-users.\n\nNice to Have\nExperience of using both Jamf and InTune at a high level.\n\nExperience securing microservice architectures or EKS clusters specifically.\n\nExperience using AI agents for production security workflows.\n\nAbility to use SQL for detection and incident investigation.\n\nHaving rolled out DAST or SAST in a production environment.","description_format":"text","description_chars":4728,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Financial Services","AI Agents","Hedge Funds & Alternative Investments","Financial Data & Market Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-14T07:11:30Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Skilled Worker","cap_exempt":false,"checked_at":"2026-10-14T06:20:30+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":15,"band":"cold","label":"Long shot","p_open":1,"p_active":0.431,"p_room":0.35,"age_days":47,"expected_fill_days":19,"reasons":["conf:2","win:tail"],"computed_at":"2026-10-14T17:13:38Z"},"pay":null,"html_url":"https://alion.io/job/intropic-io-security-engineer","json_url":"https://alion.io/job/intropic-io-security-engineer.json","meta":{"generated_at":"2026-10-14T17:13:38Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":22028,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-15T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3908758},"rest":"https://alion.io/mcp/rest/get_company?id=3908758"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fintropic-io-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fintropic-io-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fintropic-io-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/intropic-io-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fintropic-io-security-engineer"}]}