security engineer in investment management

Man Group is a global alternative investment management firm that pursues outperformance for sophisticated clients through its Systematic, Discretionary and Solutions offerings. Its investment strategies span public and private markets and all major asset classes, with a significant focus on alternatives.

• Design, build and operate security platform services and APIs, including policy decision, just-in-time access and short-lived credential issuance
• Write and maintain tested, version-controlled policy-as-code deployed through GitOps
• Integrate the platform with identity providers, secrets management and existing internal infrastructure
• Run services to production standards for reliability, performance and observability, including second-line on-call support
• Provide Python APIs and onboard application teams and AI-agent developers to the platform, with documentation that makes the secure path easy
• Build logging, metrics and alerting for platform services, and contribute SIEM detection rules

• Hands-on experience building and operating production services with Python
• Experience with Kubernetes, Linux and containerised environments, including networking fundamentals and performance troubleshooting
• Solid understanding of authentication, authorisation and secrets management, including OIDC/OAuth, Azure AD/Entra ID and vault technologies
• Experience with infrastructure-as-code tools such as Terraform, Ansible or Helm, and GitOps-based deployment
• Working knowledge of observability stacks such as ELK, Prometheus and Grafana, including building dashboards and alerting rules
• Clear communication and a structured approach to reasoning about risk
• Будет плюсом: advanced Kubernetes knowledge, including network policies, pod security standards, admission controllers and resource quota enforcement; policy engines and workload identity such as OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE and Envoy/service mesh; REST/gRPC API design for internal platform consumers; network security controls such as WAFs, segmentation, TLS termination and egress filtering

• Flexible working arrangements are available
• Two annual paid “Mankind” days for community volunteering
• Benefits include competitive holiday entitlements, pension/401k, life and long-term disability coverage, group sick pay, enhanced parental leave and long-service leave
• Depending on location, additional benefits may include private medical coverage, discounted gym membership options and pet insurance