ION Group

About us: We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world. Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading, and risk. Over 800 of the world’s leading banks and broker dealers use our electronic trading platforms to operate the world’s financial market infrastructure. ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe,  Our ever-expanding global footprint, cutting-edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision. Learn more at <a href="https://iongroup.com/" rel="noopener noreferrer nofollow ugc" target="_blank">iongroup.com</a>.   Role Overview: ION Markets Information Security Team is looking to hire a Senior Platform Security Engineer that support the division’s security strategy through definition and implementation of security controls across our platforms, infrastructure, and operational workflows. As the Senior Platform Security Engineer, you will play a key role in safeguarding our systems,clients and Intellectual Property. You’ll sit at the intersection of security operations, governance risk, and product security, helping to design, operate, and improve a robust security posture for our services.  You will be serving as both a hands-on technical leader and operational responder, working closely with Product, infrastructure and Security Operations teams. We are looking for a hard-working, dedicated and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. Ideally the candidate will have come from related security and architecture roles, focusing on security operations and product development. <h3>Your duties and responsibilities </h3><ul><ul><li>Support design and execution of the information security risk management framework </li><li>Work with Legal, Risk and IT to ensure compliance with NIS2, DORA and/or ISO27K where relevant. </li><li>Maintain and improve policies, standards and control documentation aligned to regulatory and client obligations. </li><li>Assist with internal and external audits, client due diligence and exception management. </li><li>Support product and engineering teams in adopting DevSecOps and secure design principles. </li><li>Act as point of escalation during major incidents or zero-day threats for the in-scope entity. </li><li>Lead and continuously improve our detection and response capabilities for the specific entity. </li><li>Serve as a senior incident responder, addressing emerging threats across the environment. </li><li>Collaborate with infrastructure, network, and cross-functional teams to contain, investigate, and remediate security incidents. </li><li>Conduct root cause analysis and participate in forensic investigations as needed. </li><li>Enhance system visibility by expanding logging coverage and implementing additional monitoring capabilities. </li><li>Maintain, update, and regularly test incident response runbooks, containment strategies, and escalation protocols. </li><li>Lead the end-to-end vulnerability management process for ION Markets systems, from identification to remediation. </li><li>Provide support for security architecture reviews of developed systems to ensure alignment with best practices. </li><li>This role may require some overnight, weekend and on-call activities.  </li></ul></ul><h3>Your skills, experience, and qualifications </h3><ul><ul><li><b>Fluency in Italian and English</b>, as the role requires regular interaction with internal stakeholders, regulatory bodies and clients in the Italian Market </li><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include: </li><li>Security+, OSCP, CCSP, CEH, GCIH, GMON </li><li><b>7+ years' experience in Information Security </b>with proven experience in operations &amp; compliance roles. </li><li>Must have fundamental programming/scripting capabilities (e.g. python, PowerShell, bash, etc.) </li><li>Familiarity with NIS2 / DORA and external regulations. </li><li>Strong understanding of ISO27K </li><li>A team player with the ability to work independently and unsupervised  </li><li>Ability to own delegated tasks and see them through to completion </li><li>Ability to manage time and prioritize work to maximize productivity </li><li>Excellent communication skills (both written and verbal) </li><li>Exceptional attention to detail and quality </li><li>Excellent problem-solving techniques and trouble analysis skills </li><li>Endpoint security concepts, controls, and best practices for Servers (e.g. Windows and Linux)  </li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices </li><li>Cryptography fundamentals and data security controls and best practices </li><li>Forensic investigation techniques </li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc.  </li></ul></ul>

Senior Platform Cyber Security Engineer

<b>The Role:</b>The Vulnerability Management Analyst is a global role within ION’s central services division and will support the Group Security strategy and operational excellence through the identification, mitigation and remediation of information security vulnerabilities, misconfigurations and risks to the business. This role reports to the Vulnerability Management Manager who reports to the Global Head of IT Security.As a member of the ION Security team, you will build and lead a team of Security professionals specialising in Vulnerability Management along with managing the partners and technology vendor deliverables and of course building and owning the strategy to deliver a world class Vulnerability Management program. The candidate must understand their role in the broader vulnerability management program and your team will regularly perform discovery scanning, risk/exposure assessments, mitigation support activities, continuous validation assessments, and lessons learned workshops and improvement projects to continuously improve our process across Group Security and all other Verticals.We are looking for a diligent, dedicated, creative and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate with an extensive cybersecurity background, at least 5+ years working in a security role, with focus on Vulnerability Management.<h3>Responsibilities:</h3><ul><ul><li>This role may require work-out of hours in support of 24x7 globally coordinated operation</li><li>The primary responsibilities of this role are to:</li><li><b>Personnel Management</b></li><li>Align deliverables and objectives to OKRs</li><li>Be the escalation point for security Tooling issues and critical security breaches</li><li><b>Protect and defend</b>:</li><li>Manage Vulnerability Management tooling to ensure coverage/availability/efficacy</li><li>Drive improvements and feature enhancement to ensure ROI</li><li><b>Operate and maintain</b>:</li><li>Configure, tune, maintain &amp; operate key vulnerability management controls</li><li>Management reporting – real-time metrics and scheduled reports</li><li>Drive process/procedure changes accordingly</li><li>Ensure quality of ticketing &amp; runbook maintenance </li><li>Cultivate and maintain strong vendor relationships </li><li>Have an attitude of continuous improvement </li><li>Participate in CAB, Tool review or Architecture Review Boards (ARBs)</li><li><b>As a member of the ION IT Security Team, it is expected that the person in this role will:</b></li><li>Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines</li><li>Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.</li><li>Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents </li><li>Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities</li><li>Define, document, and follow approved processes for all the responsibilities included in this job description. Create and maintain documentation for systems, including design and operation</li><li>Review vulnerability management systems, configurations, and processes to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results</li></ul></ul><h3>Experience, Skills and Qualifications:</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:</li><li>Security+, CCSP, CEH, GCIH, GMON, CASP, or CISSP</li><li>Minimum of 5 years’ experience in Vulnerability Management within large organizations</li><li>Excellent track record of building a Vulnerability Management program on a global scale with knowledge on vulnerability assessments, remediation and mitigation activities</li><li>Technical Security/Engineering/Compliance background with a previous track record of building risk management framework and applying to an existing vulnerability management program</li><li>Strong technical expertise in implementing a Prioritization formula to vulnerabilities and misconfigurations and translating these into risks</li><li>Excellent knowledge of Vulnerability Management frameworks such as NIST/SANS</li><li><b>The following general characteristics are required:</b></li><li>A team player with the ability to work independently and unsupervised </li><li>Ability to own delegated tasks and see them through to completion</li><li>Ability to manage time and prioritize work to maximize productivity</li><li>Excellent reporting and presentation skills are essential for this role</li><li>Excellent communication skills (both written and verbal)</li><li>Exceptional attention to detail and quality</li><li>Excellent problem-solving techniques and trouble analysis skills</li><li>Experience in design and publishing Security Standards &amp; Policies</li><li>Experienced in running global Bug Bounty/VDP programs</li><li>Experienced in Pen Testing, from scope, schedule, findings, remediation and risk registration</li><li><b>The candidate should have a good knowledge of:</b></li><li>Vulnerability Management concepts, controls, and best practices for all Operating systems &amp; asset types, (e.g. workstations, endpoints, mobile, servers either Windows/Linux, cloud instances, etc.)</li><li>Vulnerability Management tools (Tenable/Rapid7/Qualys)</li><li>Cloud Security compliance (IaaS, PaaS, SaaS) and misconfigurations</li><li>Multi-platform endpoints, infrastructure and XaaS vulnerability management deployments</li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices</li><li>Forensic investigation techniques</li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, Vulnerability Management, MDM, etc.</li><li>Proven knowledge of compliance, regulatory practices and experience managing audits</li></ul></ul><b>About us:</b>We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.• Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.•  Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe. Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.

Vulnerability Management Analyst

<b>The Role:</b>The Vulnerability Management Manager is a global role within ION’s central services division and will support the Group Security strategy and operational excellence through the identification, mitigation and remediation of information security vulnerabilities, misconfigurations and risks to the business. This role reports to the Global Head of IT Security, who reports to the Group Chief Information Security Officer (CISO)As a member of the ION Security team, you will build and lead a team of Security professionals specialising in Vulnerability Management along with managing the partners and technology vendor deliverables and of course building and owning the strategy to deliver a world class Vulnerability Management program. The candidate must understand their role in the broader vulnerability management program and your team will regularly perform discovery scanning, risk/exposure assessments, mitigation support activities, continuous validation assessments, and lessons learned workshops and improvement projects to continuously improve our process across Group Security and all other Verticals.We are looking for a diligent, dedicated, creative and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate with an extensive cybersecurity background, at least 10+ years working in a security role, with focus on Vulnerability Management. <h3>Key Responsibilities:</h3><ul><ul><li>This role may require work-out of hours in support of 24x7 globally coordinated operation</li><li>The primary responsibilities of this role are to:</li><li><b>Personnel Management</b></li><li>Ensure team members have clear objectives/development plans</li><li>Align Teams’ objectives to OKRs</li><li>Be the escalation point for security Tooling issues and critical security breaches</li><li>Responsible for team development, upskilling &amp; mentoring</li><li><b>Protect and defend</b>:</li><li>Manage Vulnerability Management tooling to ensure coverage/availability/efficacy</li><li>Drive improvements and feature enhancement to ensure ROI</li><li><b>Operate and maintain</b>:</li><li>Configure, tune, maintain &amp; operate key vulnerability management controls</li><li>Management reporting – real-time metrics and scheduled reports</li><li>Drive process/procedure changes accordingly</li><li>Ensure quality of ticketing &amp; runbook maintenance </li><li>Cultivate and maintain strong vendor relationships </li><li>Have an attitude of continuous improvement </li><li>Participate in CAB, Tool review or Architecture Review Boards (ARBs)</li><li><b>As a member of the ION IT Security Team, it is expected that the person in this role will:</b></li><li>Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines</li><li>Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.</li><li>Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents </li><li>Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities</li><li>Define, document, and follow approved processes for all the responsibilities included in this job description. Create and maintain documentation for systems, including design and operation</li><li>Review vulnerability management systems, configurations, and processes to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results</li></ul></ul><h3>Experience, Skills and Qualifications:</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:</li><li>Security+, CCSP, CEH, GCIH, GMON, CASP, or CISSP</li><li>10 years’ experience in Vulnerability Management within large organizations with at least 5 years in a senior leadership role</li><li>Excellent track record of building and leading a Vulnerability Management program on a global scale with knowledge on vulnerability assessments, remediation and mitigation activities</li><li>Technical Security/Engineering/Compliance background with a track record of building and running global teams</li><li>Previous track record of build risk management framework and applying to an existing vulnerability management program</li><li>Strong technical expertise in implementing a Prioritization formula to vulnerabilities and misconfigurations and translating these into risks</li><li>Excellent knowledge of Vulnerability Management frameworks such as NIST/SANS</li><li><b>The following general characteristics are required:</b></li><li>A team player with the ability to work independently and unsupervised </li><li>Ability to own delegated tasks and see them through to completion</li><li>Ability to manage time and prioritize work to maximize productivity</li><li>Excellent reporting and presentation skills are essential for this role</li><li>Excellent communication skills (both written and verbal)</li><li>Exceptional attention to detail and quality</li><li>Excellent problem-solving  techniques and trouble analysis skills</li><li>Experience in design and publishing Security Standards &amp; Policies</li><li>Experienced in leading Purple Teaming</li><li>Experienced in running global Bug Bounty/VDP programs</li><li>Experienced in leading Pen Testing, from scope, schedule, findings, remediation and risk registration and running the Pen Test program for Group Security as well as all other Verticals</li><li><b>The candidate should have a good knowledge of:</b></li><li>Vulnerability Management concepts, controls, and best practices for all Operating systems &amp; asset types, (e.g. workstations, endpoints, mobile, servers either Windows/Linux, cloud instances, etc.)</li><li>Vulnerability Management tools (Tenable/Rapid7/Qualys)</li><li>Cloud Security compliance (IaaS, PaaS, SaaS) and  misconfigurations</li><li>Multi-platform endpoints, infrastructure and XaaS vulnerability management deployments</li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices</li><li>Forensic investigation techniques</li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, Vulnerability Management,      MDM, etc.</li><li>Excellent track record of Senior Leadership and Board level interaction, reporting and communications</li><li>Experience in InfoSec program management, project support and large-scale change</li><li>Proven knowledge of compliance, regulatory practices and experience managing audits</li></ul></ul><b>About us:</b>We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.• Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.•  Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe. Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.

Vulnerability Management Manager

<b>The Role:</b>The IT Security Engineering Manager is a global role within ION’s central services division and will support the Group Security strategy and operational excellence through the identification, mitigation and remediation of information security risks to the business. This role reports to the Global Head of IT Security, who reports to the Group Chief Information Security Officer (CISO).As a member of the ION Security team, the successful candidate will be responsible for managing the cybersecurity engineering team. This team are responsible for management, maintenance, support, tuning and improvement of technical security controls to protect ION’s information technology (IT) systems and networks across the group and will help ION evolve its technical security posture to keep up with the ever-changing security landscape and emerging threats. This role may require shift work in the support of a 24x7 globally coordinated operation. The IT Security Engineering Manager’s other responsibilities include oversight and management of the MSSP and security vendor relationships, creating governance initiatives for all security tooling in the form of product steering committees, product/vendor roadmaps, annual product reviews and formally tracking feature adoption and any other duties assigned by Head of IT Security.We are looking for a diligent, dedicated, creative and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate with an extensive cybersecurity background, at least 10+ years working in a security role, with focus on security engineering. <h3>Key Responsibilities:</h3><ul><ul><li>This role may require work out of hours </li>The primary responsibilities of this role are to:<b>Personnel Management:</b><li>Ensure team members have clear objectives/development plans</li><li>Align Teams’ objectives to OKRs</li><li>Be the escalation point for security Tooling issues and critical security breaches</li><li>Responsible for team development, upskilling &amp; mentoring</li><li>Responsible for vendor/MSSP relationships for the group-wide organization</li><b>Protect and defend</b>: <li>Manage Security tooling to ensure coverage/availability/efficacy of tooling</li><li>Provide oversight, guidance and leadership of the IT Security Engineering Team</li><li>Drive improvements and feature enhancement to ensure ROI</li><b>Operate and maintain</b>: <li>Configure, tune, maintain and operate key security controls, technologies, and other risk mitigations</li><li>Own the management reporting and provided monthly Executive level reporting</li><li>Drive process/procedure changes accordingly</li><li>Ensure quality of ticketing &amp; runbook maintenance </li><li>Cultivate and maintain strong vendor relationships </li><li>Have an attitude of continuous improvement </li><li>Be accountable/responsible for security tool health throughout the estate</li><li>Manage the governance initiative for security tooling</li><li>Engage with vendors to introduce formal QBRs, tool reviews, feature enhancements and adoption</li><li>Create and own the overarching security tooling strategy</li><li>Regular tool reviews</li><li>Documented process for a formalized approach to security tool selection</li><li>Participate in CAB, Tool review or Architecture Review Boards (ARBs)</li><b>As a member of the ION IT Security Team, it is expected that the person in this role will:</b><li>Execute ongoing, operational business-as-usual (BAU) tasks to meet management-defined KPIs and SLAs, and deliver security projects in line with management-defined priorities and deadlines</li><li>Stay current with the latest security news, threats, intelligence, tactics, techniques, and vulnerabilities. Research and analyze new threats and vulnerabilities to determine exposure.</li><li>Assist and/or lead efforts to isolate, contain, respond to, and recover from security incidents </li><li>Identify, review, prioritize, plan, coordinate, and follow-up on the remediation of vulnerabilities</li><li>Configure, customize, tune, manage, troubleshoot, and maintain effective and efficient operation of security technologies, such as SIEM, endpoint security, secure web gateway, CASB, DLP, email security, intrusion detection/prevention systems, etc. This may also include scripting, automation, and orchestration across various platforms</li><li>Define, document, and follow approved processes for all the responsibilities included in this job description. Create and maintain documentation for systems, including design and operation</li><li>Review systems, configurations, and processes to ensure and report on compliance with ION policy, client requirements, audit controls, regulations, and industry best practices. Provide best practice security recommendations to IT and other teams within ION, based on review results</li><li>Respond to information security-related inquiries and requests</li></ul></ul><h3>Required Skills, Experience and Qualifications:</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:</li><li>Security+, CCSP, CEH, GCIH, GMON, CASP, or CISSP</li><li>10+ years' experience in information security with at least 3-5 years in a Security Engineering role</li><li>Fundamental understanding of programming/scripting </li>The following general characteristics are required:<li>A team player with the ability to work independently and unsupervised </li><li>Ability to own delegated tasks and see them through to completion</li><li>Ability to manage time and prioritize work to maximize productivity</li><li>Excellent communication skills (both written and verbal)</li><li>Exceptional attention to detail and quality</li><li>Excellent problem-solving techniques and trouble analysis skills</li><li>The candidate should have a good knowledge of:</li><li>Endpoint security concepts, controls, and best practices for workstations (e.g. Windows and       Mac) and server (e.g. Windows and Linux) operating systems</li><li>SIEM technology to monitor, analyze, and respond to security events. To develop and implement security policies, managing SIEM systems, and investigating incidents.</li><li>General IT networking concepts, protocols, standards and network security concepts, controls,       and best practices</li><li>Cryptography fundamentals and data security controls and best practices</li><li>Forensic investigation techniques</li><li>Security standards/best practices and frameworks</li></ul></ul><b>About us</b>We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.• Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.• Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe. Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.

IT Security Engineering Manager

<b>The Role:</b>ION Markets Information Security Team is looking to hire a Platform Security Lead that support the division’s security strategy through definition and implementation of security controls across our platforms, infrastructure, and operational workflows.As the Platform Security Lead, you will be responsible for designing and implementing end-to-end security controls across ION Markets on-premises infrastructure and other internal platforms. The role spans security architecture, engineering, and operations with a strong focus on automation, detection and secure by design principles. Additionally, as part of the role you will be leading and participating in threat detection, incident response and vulnerability management remediation.You will be serving as both a technical leader and operational responder, working closely with Product, infrastructure and Security Operations teams.We are looking for a hard-working, dedicated and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. Ideally the candidate will have come from related security and architecture roles, focusing on security operations and product development.<h3>Key Responsibilities</h3><ul><ul><li>Serve as a senior incident responder, addressing emerging threats across the environment.</li><li>Collaborate with infrastructure, network, and cross-functional teams to contain, investigate, and remediate security incidents.</li><li>Conduct root cause analysis and participate in forensic investigations as needed.</li><li>Enhance system visibility by expanding logging coverage and implementing additional monitoring capabilities.</li><li>Maintain, update, and regularly test incident response runbooks, containment strategies, and escalation protocols.</li><li>Lead the end-to-end vulnerability management process for ION Markets systems, from identification to remediation.</li><li>Provide support for security architecture reviews of developed systems to ensure alignment with best practices.</li><li>Stay up to date with the latest security threats, news, intelligence, tactics, techniques, and vulnerabilities; conduct research and analysis to assess potential impact and exposure.</li><li>Perform proactive threat hunting activities, and manage the triage, investigation, and escalation of security alerts.</li><li>Develop Standard operating procedures for operations &amp; architecture activities.</li></ul></ul><h3>Required Skills, Experience and Qualifications</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:</li><li>Pen Test+, Security+, OSCP, CCSP, CEH, GCIH, GMON.</li><li>7+ years' experience in Information Security or Security Architecture roles.</li><li>Must have fundamental programming/scripting capabilities (e.g. python, PowerShell, bash, etc.).</li><li>Must have in-depth understanding of operating systems (Windows/Linux).</li><li>A team player with the ability to work independently and unsupervised.</li><li>Ability to own delegated tasks and see them through to completion.</li><li>Ability to manage time and prioritize work to maximize productivity.</li><li>Excellent communication skills (both written and verbal).</li><li>Exceptional attention to detail and quality.</li><li>Excellent problem-solving techniques and trouble analysis skills.</li><li>Endpoint security concepts, controls, and best practices for Servers (e.g. Windows and Linux).</li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices.</li><li>Cryptography fundamentals and data security controls and best practices.</li><li>Forensic investigation techniques.</li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc. </li></ul></ul><b>About us</b>We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.• Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.• Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe. Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.

London

Platform Security Lead

<b>The Role:</b>ION Markets Information Security Team is looking to hire a Platform Security Engineer that support the division’s security strategy through definition and implementation of security controls across our platforms, infrastructure, and operational workflows.As the Platform Security Engineer, you will be responsible for designing and implementing end-to-end security controls across ION Markets on-premises infrastructure and other internal platforms. The role spans security architecture, engineering, and operations with a strong focus on automation, detection and secure by design principles. Additionally, as part of the role you will be participating in threat detection, incident response and vulnerability management remediation.You will be serving as an operational responder, working closely with Product, infrastructure and Security Operations teams.We are looking for a hard-working, dedicated and motivated individual. Excellent communication skills are a must, and the role holder will be expected to cultivate working relationships with other teams and colleagues of varying technical ability. The role would suit a technically strong candidate looking to drive forward career progression within a dedicated security team. Ideally the candidate will have come from related security and architecture roles, focusing on security operations and product development.<h3>Key Responsibilities</h3><ul><ul><li>Serve as a senior incident responder, addressing emerging threats across the environment.</li><li>Collaborate with infrastructure, network, and cross-functional teams to contain, investigate, and remediate security incidents.</li><li>Conduct root cause analysis and participate in forensic investigations as needed.</li><li>Enhance system visibility by expanding logging coverage and implementing additional monitoring capabilities.</li><li>Maintain, update, and regularly test incident response runbooks, containment strategies, and escalation protocols.</li><li>Lead the end-to-end vulnerability management process for ION Markets systems, from identification to remediation.</li><li>Provide support for security architecture reviews of developed systems to ensure alignment with best practices.</li><li>Stay up to date with the latest security threats, news, intelligence, tactics, techniques, and vulnerabilities; conduct research and analysis to assess potential impact and exposure.</li><li>Perform proactive threat hunting activities, and manage the triage, investigation, and escalation of security alerts.</li><li>Develop Standard operating procedures for operations &amp; architecture activities.</li></ul></ul><h3>Required Skills, Experience and Qualifications</h3><ul><ul><li>Degree/diploma/certifications in a technology-related field and/or relevant working experience; highly desired certifications include:</li><li>Pen Test+, Security+, OSCP, CCSP, CEH, GCIH, GMON.</li><li>7+ years' experience in Information Security or Security Architecture roles.</li><li>Must have fundamental programming/scripting capabilities (e.g. python, PowerShell, bash, etc.).</li><li>Must have in-depth understanding of operating systems (Windows/Linux).</li><li>A team player with the ability to work independently and unsupervised.</li><li>Ability to own delegated tasks and see them through to completion.</li><li>Ability to manage time and prioritize work to maximize productivity.</li><li>Excellent communication skills (both written and verbal).</li><li>Exceptional attention to detail and quality.</li><li>Excellent problem-solving techniques and trouble analysis skills.</li><li>Endpoint security concepts, controls, and best practices for Servers (e.g. Windows and Linux).</li><li>General IT networking concepts, protocols, standards and network security concepts, controls, and best practices.</li><li>Cryptography fundamentals and data security controls and best practices.</li><li>Forensic investigation techniques.</li><li>Prior experience deploying, configuring, managing, and/or operating security technologies is preferred, such as endpoint security (e.g. AV/EPP/EDR), SIEM, DLP, SWG, CASB, UEBA, IDS, IPS, firewalls, IAM/PIM/PAM, vulnerability management, MDM, etc. </li></ul></ul><b>About us</b>We’re a diverse group of visionary innovators who provide trading and workflow automation software, high-value analytics, and strategic consulting to corporations, central banks, financial institutions, and governments. Founded in 1999, we’ve achieved tremendous growth by bringing together some of the best and most successful financial technology companies in the world.• Over 2,000 of the world’s leading corporations, including 50% of the Fortune 500 and 30% of the world’s central banks, trust ION solutions to manage their cash, in-house banking, commodity supply chain, trading and risk.• Over 800 of the world’s leading banks and broker-dealers use our electronic trading platforms to operate the world’s financial market infrastructure.ION is a rapidly expanding and dynamic group with 13,000 employees and offices in more than 40 cities around the globe. Our ever-expanding global footprint, cutting edge products, and over 40,000 customers worldwide provide an unparalleled career experience for those who share our vision.ION is committed to maintaining a supportive and inclusive environment for people with diverse backgrounds and experiences. We respect the varied identities, abilities, cultures, and traditions of the individuals who comprise our organization and recognize the value that different backgrounds and points of view bring to our business.ION adheres to an equal employment opportunity policy that prohibits discriminatory practices or harassment against applicants or employees based on any legally impermissible factor.We may use artificial intelligence (AI) tools to support parts of the hiring process, such as reviewing applications, analyzing resumes, or assessing responses. These tools assist our recruitment team but do not replace human judgment. Final hiring decisions are ultimately made by humans. If you would like more information about how your data is processed, please contact us.

Platform Security Engineer

Apply to Forensic Cyber Security Jobs in companies remotely and near you. New Forensic Cyber Security Jobs added daily.

Job Position and Company	Location	Tags	Posted
Senior Platform Cyber Security Engineer at ION Group	Remote Full Time Forensic Incident Response Consulting
Vulnerability Management Analyst at ION Group	Remote Full Time Forensic Audit Analyst
Vulnerability Management Manager at ION Group	Remote Full Time CISO Forensic Audit
IT Security Engineering Manager at ION Group	Remote Full Time CISO Forensic Audit
Platform Security Lead at ION Group	Remote Full Time Forensic Incident Response Consulting

Forensic Cyber Security Jobs

1 Forensic Cyber Security Jobs. Page 1 of 1

5 closed forensic cyber security jobs:

Subscribe to the weekly
Cyber Security Jobs Newsletter

Forensic Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Forensic Cyber Security Jobs

1 Forensic Cyber Security Jobs. Page 1 of 1

5 closed forensic cyber security jobs:

Subscribe to the weekly Cyber Security Jobs Newsletter

Forensic Cyber Security Jobs

All Cyber Security Jobs

Cyber Security Jobs by Category

Subscribe to the weekly
Cyber Security Jobs Newsletter