Security Engineer

Hudson River TradingNew York, NY

About The Position

Hudson River Trading (HRT) is seeking a curious, innovative Security Engineer to join our Enterprise Security team and help safeguard the infrastructure behind one of the world’s most demanding trading environments, with a focus on both performance and resilience. This role spans system hardening across infrastructure and Windows, Linux, and macOS endpoints, ownership of a comprehensive vulnerability management program, securing SaaS deployments, maintaining an enterprise-grade open source PKI platform, and strengthening identity and access management. You will have significant autonomy to shape HRT’s global cybersecurity systems, building solutions that scale without compromising performance. The role requires broad experience across enterprise security domains and a pragmatic approach to integrating security into development workflows, emphasizing defense-in-depth while minimizing friction for developers.

Requirements

  • 5+ years of experience in security engineering
  • Proficiency in Python
  • Experience hardening enterprise endpoints across Windows, Linux, and macOS
  • Strong experience with vulnerability management tools and processes, including risk prioritization and remediation workflows
  • Experience securing and managing enterprise SaaS platforms
  • Experience designing and operating Public Key Infrastructure (PKI) systems
  • Experience designing and maintaining Identity and Access Management (IAM) solutions
  • Experience integrating security into CI/CD pipelines and building automated controls for infrastructure
  • Familiarity with software supply chain security

Nice To Haves

  • Smallstep a plus

Responsibilities

  • Apply security baselines and harden systems across a diverse fleet of enterprise endpoints and servers (Windows, Linux, macOS)
  • Own and evolve our vulnerability management program, including risk prioritization and remediation workflows
  • Design and operate Identity and Access Management (IAM) solutions at enterprise scale
  • Secure and manage key enterprise SaaS platforms and their security controls
  • Build and scale an enterprise-grade public key infrastructure (PKI)
  • Leverage configuration management and infrastructure as code to enforce security controls, prioritizing automation over manual processes

Benefits

  • discretionary performance-based bonuses
  • competitive benefits package
© 2026 Teal Labs, Inc
Privacy PolicyTerms of Service