Enterprise Security Engineer

Hudson River Trading (HRT) is looking for a curious and innovative cybersecurity engineer who is excited about modern cloud, infrastructure, and AI security practices. 

Our Enterprise Security team is responsible for safeguarding the infrastructure behind one of the most technically demanding trading environments in the world. From securing cloud and computing platforms to strengthening IAM practices and advancing AI security, your work will be central to how we protect and scale HRT’s technology.

In this role, you’ll have the autonomy to shape HRT’s global cybersecurity systems while developing high-impact solutions built for both performance and resilience. We’re looking for someone who thrives in DevSecOps, values defense in depth without adding developer friction, and approaches challenges with both rigor and creativity.

Responsibilities

• Architect and implement security controls that encourage secure design patterns in the public and hybrid cloud, and our AI ecosystem
• Manage and secure a wide variety of systems (including conventional compute and AI workloads)  spanning public cloud (AWS/GCP/Azure) and hybrid cloud platforms
• Instrumenting observability for the cloud and AI systems where there are unique high performance requirements
• Engineer, implement, and maintain IAM solutions for infrastructure components and enterprise tools in a cloud-native manner
• Design, implement, and manage a comprehensive vulnerability management program using industry-standard tools to effectively prioritize and remediate security risks
• Detecting configuration drift or malicious activity as a signal for Security Operations
• Collaborating with Security Operations and engineering teams to write runbooks for handling incidents/issues around secure cloud and AI/LLM usage
• Identify security threats and vulnerabilities to cloud and AI systems currently in use at HRT, as well as evaluate security needs for any future solutions

Qualifications

• 5+ years of experience in a security engineering role
• 5+ years of software development experience, preferably in Python
• Experience developing and operating in a DevSecOps lifecycle to implement automated controls for Kubernetes, containers, public cloud deployments and AI workloads
• Experience working with and securing Linux systems (Debian is a huge plus!)
• Experience securing SaaS platforms is a plus

The estimated base salary range for this position is $150,000 - $250,000 per year, based on job-related skills and experience. This role will also be eligible for discretionary performance-based bonuses and a competitive benefits package.