We are working with a leading financial firm seeking a hands-on Cybersecurity Architect to design and deliver security controls across cloud, infrastructure, endpoint, identity, and security operations.
This role requires both architecture ownership and hands-on delivery involvement, with a strong focus on Cloud Security.
Responsibilities
- Design and maintain security architecture across on-premises and Azure cloud environments
- Build practical, right-sized security controls for a lean hedge fund environment
- Architect Azure security, secure landing zones, ingress/egress controls, identity security, PAM, and secrets management
- Improve endpoint security baselines, vulnerability management, patching, and software risk remediation
- Lead technical delivery across SIEM/SOC integrations, DLP, network segmentation, EDR/XDR, and vulnerability management
- Work with infrastructure, cloud, application, and project teams to embed security by design
- Produce technical documentation, engineering standards, and deployment playbooks
- Provide senior technical escalation for security incidents and outsourced SOC/SIEM partners
- Conduct threat modelling for new applications, platforms, and infrastructure changes
- Translate audit, cyber risk, and regulatory requirements into engineering solutions
Requirements
- 8–12 years experience in cybersecurity engineering, security architecture, cloud security, or security infrastructure
- Strong hands-on experience with Microsoft Defender for Endpoint, Microsoft 365 Defender / E5 Security, Entra ID, identity protection, and Azure security controls
- Strong Azure security architecture and engineering experience
- Experience across SIEM/SOC, EDR/XDR, DLP, vulnerability management, network segmentation, endpoint security, and patch/software deployment
- Proven ability to design and deliver security controls across hybrid cloud environments
- Financial services experience preferred; hedge fund or asset management experience advantageous
- Comfortable working in a lean environment requiring both architecture ownership and hands-on delivery
- Familiarity with MAS TRM, NIST CSF 2.0, or similar security frameworks
