Security Engineer - Platform Security

Qube Research & Technologies•New York, NY

1d•$180,000 - $260,000•Onsite

About The Position

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager. You will join our newly established Security team in New York, working as part of QRT’s global Security function, which safeguards QRT's technology platforms, data, and operational environments. You will design, build, and operate secure infrastructure platforms that support the evaluation and adoption of emerging technologies, combining deep security expertise with strong engineering skills to deliver scalable controls, effective risk management, and a low-friction experience for engineers, researchers, and data scientists.

Requirements

7+ years of experience in security engineering, platform security, cloud security or infrastructure engineering.
Strong experience designing secure hybrid infrastructure, ideally including AWS.
Deep knowledge of network security, IAM, least privilege and defence-in-depth.
Hands-on experience with containers, Kubernetes, virtualisation and workload security.
Strong infrastructure-as-code and automation experience, particularly Terraform.
Strong scripting or software development skills in Python, Go, PowerShell or similar.
Practical experience with threat modelling, CI/CD security and software supply-chain security.
Curious, automation-minded and comfortable working with new and unfamiliar technologies.
High ownership, can-do and low ego, with strong collaboration, communication and judgement.

Responsibilities

Design and build secure platforms for the evaluation and adoption of emerging technologies across cloud and on-premises environments.
Develop reusable security architectures, isolation patterns, trust boundaries and guardrails.
Evaluate new technologies, identify risks and translate them into practical engineering controls.
Design security across networks, identity, privileged access, containers, Kubernetes and workload isolation.
Automate security by default using infrastructure-as-code, policy-as-code, APIs and software engineering.
Apply LLMs, AI-assisted tooling and emerging technologies to improve security engineering and automation.
Perform threat modeling and risk assessments for new infrastructure, software, cloud services, and emerging technologies, translating risks into practical controls.
Partner with Infrastructure, Engineering, Research, and business teams to deliver secure, usable solutions and communicate risk clearly to technical and non-technical stakeholders.