Senior Platform Cyber Security Engineer

�

� Description

• • Shape the security posture of a global fintech leader: ION Markets processes millions of trades and billions of euros in daily notional for 800+ of the world’s top banks and 50 % of the Fortune 500. You will own the security roadmap for the platforms that keep the world’s financial markets running, translating emerging threats into concrete controls that protect client assets and ION intellectual property.
• • Own end-to-end vulnerability management: from discovery and triage through risk-based prioritisation, patching, compensating controls and post-mortem. You will automate scanning across 3 000+ Windows & Linux servers, container estates and cloud workloads, feed results into Jira and ServiceNow, and present concise risk metrics to senior stakeholders every week.
• • Act as the senior incident responder for critical and zero-day events. You will lead cross-war-room calls with infrastructure, network, product and legal teams; write concise situation reports for executives; preserve forensic evidence; and drive root-cause analysis that prevents recurrence. Participation in a follow-the-sun on-call rota (one week in five) is required.
• • Design and enforce security architecture for new trading platforms. You will review Terraform, CloudFormation, Ansible and Kubernetes manifests; threat-model data flows; specify encryption standards; integrate secrets management; and sign off on secure-by-design patterns before code reaches production.
• • Translate EU regulations into technical reality. You will map NIS2 and DORA articles to concrete controls, build evidence packs for auditors, track remediation exceptions, and ensure that every new service meets the mandated resilience and reporting requirements before go-live.
• • Champion DevSecOps culture across 40+ Scrum teams. You will embed SAST/DAST pipelines (GitLab, SonarQube, Checkmarx), coach developers on secure coding, create reusable IaC security modules, and reduce mean-time-to-remediate (MTTR) vulnerabilities by 30 % within your first year.
• • Expand detection & response visibility. You will write custom Sigma and YARA rules, onboard new log sources into the Elastic/Splunk SIEM, tune alert thresholds to minimise false positives, and build automated playbooks in SOAR that contain threats in under five minutes.
• • Harden 13 000 endpoints across Milan, Pisa, London and New York. You will configure EDR policies, deploy certificate-based IAM, enforce full-disk encryption, and roll out privileged-access-workstations (PAW) for administrative users, cutting lateral-movement risk by 40 %.
• • Mentor junior analysts and run quarterly purple-team exercises. You will share knowledge on Linux forensics, PowerShell logging, cloud entitlements and exploit development, raising the collective security IQ of the 60-person global InfoSec function.
• • Influence the product roadmap: your threat-intelligence briefings will guide C-level investment decisions on encryption upgrades, zero-trust networking and confidential-computing initiatives, directly impacting the bottom line and client trust.