{"id":3405072,"url":"https://alion.io/job/squarepoint-capital-it-sec-operations-lead","title":"IT Sec Operations Lead","company":{"id":684807,"name":"Squarepoint Capital","domain":"squarepoint-capital.com","url":"https://alion.io/company/squarepoint-capital","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Greenhouse","truth_index":{"grade":"C","score":61,"open_postings":73,"ghost_share":0.644,"stale_share":0,"repost_share":0,"time_to_fill_p50_days":45,"computed_at":"2026-10-30T05:48:23Z"}},"role":"Operations","role_family":"Operations","seniority":"lead","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["London, United Kingdom"],"countries":["GB"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":171000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":71},"experience_years_min":null,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Incident Management","optional":false},{"name":"Linux","optional":false},{"name":"NIST CSF","optional":false},{"name":"SIEM","optional":false},{"name":"Kubernetes","optional":true}],"status":"live","first_seen_at":"2026-10-28T15:03:36Z","employer_posted_date":"2026-10-28","last_verified_at":"2026-10-30T06:15:47Z","board_verified":true,"closed_at":null,"days_open":1,"trust":{"level":"ok","repost_count":0,"flags":["company_stale"],"days_open":1},"description":"Team: Information Security \n\nPosition overview\nThe IT Sec Operations Lead will lead Squarepoint’s global security operations capability, covering threat monitoring, detection and response, incident management, forensic readiness, cyber recovery, and vulnerability operations. The role will protect the firm’s proprietary research, source code, models, data and trading technology while enabling a fast-moving engineering environment.\nResponsibilities\nOwn the Security Operations strategy, operating model, roadmap, service standards and day-to-day effectiveness.\n\nLead oversight of SOC and MDR services, aligning monitoring and detection coverage to Squarepoint’s priority threats and critical assets.\n\nDrive detection engineering and threat hunting across endpoint, identity, network, cloud, SaaS, Linux, containers, repositories and data flows.\n\nLead material cyber incidents, coordinating investigation, containment, eradication, communications and recovery across relevant teams.\n\nMaintain and exercise response playbooks for insider threat, IP theft, ransomware, identity or cloud compromise, supplier compromise and data-integrity events.\n\nEstablish forensic-readiness, evidence-handling and investigation practices suitable for legal, regulatory and disciplinary needs.\n\nWork with Technology teams to establish rapid containment actions, secure restoration criteria and cyber-recovery assurance.\n\nProvide operational leadership for vulnerability and exposure management, using risk-based prioritisation, service levels and escalation.\n\nDefine clear security operations metrics and executive reporting, and ensure actions from incidents and exercises are tracked to closure.\n\nBuild and develop the internal team and govern specialist providers through measurable outcomes and continuous improvement.\n\nRequired qualifications\nSignificant experience leading security operations, detection and response, incident response or cyber defence in a complex technology environment.\n\nProven experience leading serious cyber incidents across technical, operational, legal, compliance and senior stakeholder groups.\n\nStrong practical knowledge of SIEM, EDR/XDR, MDR/SOC services, detection engineering, threat hunting, identity and cloud telemetry, and incident case management.\n\nExperience with incident playbooks, crisis exercises, containment, recovery, digital forensics and evidence handling.\n\nExperience managing security service providers and translating tooling and contracts into measurable operational outcomes.\n\nAbility to build capable teams, set priorities and deliver through influence across organisational boundaries.\n\nClear written and verbal communication, including concise reporting of risk, decisions and operational performance.\n\nWorking knowledge of NIST CSF and MITRE ATT&CK, or equivalent incident-handling and threat-informed defence practices.\n\nPreferred qualifications\nExperience in quantitative finance, trading technology, investment management or another environment protecting high-value intellectual property.\n\nKnowledge of Linux, Kubernetes, cloud platforms, identity infrastructure, repositories, data platforms or high-performance computing.\n\nExperience integrating cyber response and recovery with operational resilience, business continuity and disaster recovery.\n\nRelevant certifications such as CISSP, GCIH, GCFA, GNFA or CISM, or equivalent practical experience.\n\nWhat we value\nWe are looking for someone who is calm under pressure, technically credible, pragmatic and collaborative. You should be comfortable creating structure in an evolving environment, making ownership explicit and focusing on measurable risk reduction rather than process or tooling for its own sake.","description_format":"text","description_chars":3708,"description_truncated":false,"requirements":{"experience_years_min":null,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Asset Management & Funds","Hedge Funds & Alternative Investments"],"lifecycle":[{"event":"open","at":"2026-10-28T15:55:44Z"}],"visa":[{"country":"GB","licensed_sponsor":true,"evidence":"Licensed UK visa sponsor (Senior or Specialist Worker, Skilled Worker)","filings_12m":null,"filings_prev_12m":null,"green_card_filings_12m":null,"median_offered_wage_usd":null,"route":"Global Business Mobility: Senior or Specialist Worker; Skilled Worker","cap_exempt":false,"checked_at":"2026-10-30T06:20:16+00:00","sources":["UK Home Office: register of licensed sponsors (workers)"],"filings_for_role_12m":0}],"liveness":{"score":63,"band":"ok","label":"Likely open","p_open":1,"p_active":0.632,"p_room":1,"age_days":1,"expected_fill_days":45,"reasons":["conf:3","stale_co","velocity","win:early"],"computed_at":"2026-10-30T05:48:23Z"},"pay":null,"html_url":"https://alion.io/job/squarepoint-capital-it-sec-operations-lead","json_url":"https://alion.io/job/squarepoint-capital-it-sec-operations-lead.json","meta":{"generated_at":"2026-10-30T08:25:02Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11954,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-31T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":684807},"rest":"https://alion.io/mcp/rest/get_company?id=684807"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsquarepoint-capital-it-sec-operations-lead"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsquarepoint-capital-it-sec-operations-lead"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsquarepoint-capital-it-sec-operations-lead"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/squarepoint-capital-it-sec-operations-lead\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsquarepoint-capital-it-sec-operations-lead"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":3405072}},{"tool":"search_jobs","arguments":{"company":"squarepoint-capital.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":3405072},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}