Senior Staff - IT Information Security

Overview

Connecting clients to markets – and talent to opportunity.With 5,400+ employees and over 80,000 institutional, commercial, and payments clients, we operate from more than 80 offices spread across six continents. As a Fortune 100, Nasdaq-listed provider, we connect clients to the global markets – focusing on innovation, human connection, and providing world-class products and services to all types of investors.Whether you want to forge a career connecting our retail clients to potential trading opportunities, or ingrain yourself in the world of institutional investing, StoneX Group is made up of four business segments that offer endless potential for progression and growth.

 

Corporate: Engage in a deep variety of business-critical activities that keep our company running efficiently. From strategic marketing and financial management to human resources and operational oversight, you’ll have the opportunity to optimize processes and implement game-changing policies.

Responsibilities

Position Purpose: The Senior Security Engineer is responsible for the technical ownership, reliability, and continuous improvement of StoneX's core security engineering platforms across endpoint, network, data protection, cloud, and emerging technology environments. The role is accountable for engineering, operating, and enhancing enterprise security controls that provide visibility, prevention, detection, and protection of StoneX's people, data, applications, and infrastructure. 

Working as part of a globally distributed Security Engineering team, this role provides operational and engineering coverage with a particular focus on the Americas time zones (EST/PST), helping ensure platform stability, service continuity, and effective support for global business operations. 

 

Primary Duties will include:

• Engineer, operate, and continuously improve enterprise security platforms, ensuring secure configurations, comprehensive coverage, high-quality telemetry, and effective policy enforcement across the organisation. 

• Act as a senior technical subject matter expert for security engineering platforms, troubleshooting complex issues, driving platform optimisation, and enhancing preventative security capabilities. 

• Design, build, and maintain integrations, automation, data pipelines, dashboards, and reporting capabilities across security, IT service management, and asset management platforms. 

• Implement and enhance data protection capabilities, including Data Loss Prevention (DLP), data classification, sensitivity labelling, and monitoring controls across endpoint, network, email, cloud, and SaaS environments. 

• Evaluate, deploy, and optimise security automation, AI-assisted tooling, and emerging security technologies to improve operational effectiveness and risk reduction. 

• Design and implement controls that support the secure adoption of AI and Generative AI technologies, including governance, monitoring, and data protection requirements. 

• Lead proof-of-concept activities, technology evaluations, and platform enhancements to improve security coverage, operational efficiency, and user experience. 

• Develop and maintain engineering standards, platform documentation, operational runbooks, and reporting processes to support consistency, compliance, and service maturity. 

• Collaborate with Security Operations, Threat Intelligence, Identity, Infrastructure, Cloud, and Application teams to deliver integrated security controls and support incident response activities. 

• Participate in operational escalation and on-call support processes as required to maintain platform availability, reliability, and performance. 

Qualifications

To Land this role you will need:

• Significant experience in Security Engineering, Security Operations, Infrastructure Security, or a related cybersecurity discipline. 

• Strong hands-on experience designing, implementing, operating, and troubleshooting enterprise security platforms across endpoint, network, cloud, and data protection domains. 

• Experience implementing and managing security controls such as Endpoint Detection and Response (EDR/XDR), Secure Service Edge (SSE), Zero Trust Network Access (ZTNA), Cloud Access Security Broker (CASB), and Data Loss Prevention (DLP). 

• Experience designing and operating data protection programmes, including data classification, sensitivity labelling, policy tuning, and incident investigation. 

• Strong understanding of enterprise operating environments, including Windows, Linux, macOS, cloud platforms (AWS, Azure, and/or GCP), networking, and identity and access management. 

• Experience developing automation, integrations, reporting, or security telemetry solutions using APIs, scripting, or workflow automation tools. 

• Strong analytical, troubleshooting, and problem-solving skills. 

What will make you stand out

• Experience securing AI and Generative AI use cases and implementing related governance and data protection controls. 

• Experience working within global, distributed engineering teams supporting 24x7 operational environments. 

• Bachelor's or Master's degree in Cybersecurity, Information Security, Computer Science, Engineering, or a related discipline, or equivalent practical experience. 

• Relevant industry certifications such as CISSP, Microsoft Security certifications (SC-100, SC-200, AZ-500), AWS Security certifications, or similar. 

Working Environment: 

• 4 days in office per week