Want to know if this job is worth applying to?
Greater London, England, United Kingdom
Onsite
Intropic is a financial information and software company operating at the cutting edge of global capital markets. We pair modern technology (elastic cloud infrastructure and agentic AI systems) with deep market expertise to build information products that the world's most sophisticated financial institutions rely on every day. Our clients include hedge funds, proprietary trading firms, index fund managers, large asset managers, sovereign wealth funds, and investment banks, who use our products to generate alpha, manage risk, and make better decisions in fast-moving markets. We're best known for our Index Rebalance Forecast products, and we're now extending that edge into several other strategies. Headquartered in London's Canary Wharf and expanding globally, we're a team that moves fast, takes real ownership, and holds itself to a high standard of rigour and integrity.
You will keep the day-to-day of Intropic's security and IT running, and build the systems that secure it further. Colleagues rely on the IT you run. Our SOC 2 relies on the evidence you keep clean. Where the work repeats, you build it away.
This role is built for someone with solid IT experience who wants to move into security. You already know how to run an estate: laptops, accounts, SaaS apps, and access paths. Here you'll put that knowledge to work on the security side, because you cannot write a good detection or a useful guardrail without knowing what normal looks like. The role is a mix of IT, security engineering, and GRC, and it is an engineering role throughout. Anything you find yourself doing twice by hand is a candidate for automation, and you will have the tools and the mandate to build it. As you grow, the security engineering side of the role grows with you.
This is a genuine route from IT into security engineering, at a company small enough that you will build things that matter from week one. It suits a fast learner who is excited by solving difficult problems.
Security Engineering - 40%
Assist in engineering the security of our cloud infrastructure across AWS and GCP, from individual EC2 instances to a large EKS microservice estate.
Assist in building new detections. Expand coverage where we're blind and cut the noise where we're not.
Assist in threat modelling new products and services before they ship, and embed security checks directly into CI/CD.
Assist with incident response, gathering evidence and running containment steps.
Build tooling that improves how we work, from enrichment scripts to integrations between our security systems.
Help build the guardrails around our AI agent usage (Claude Code and similar) as we work out what good looks like.
IT - 40%
Run onboarding and offboarding for joiners and leavers, and build the automation that makes both fast and complete.
Manage our fleet of roughly 100 endpoints through Jamf and Intune (about 90% macOS, 10% Windows): enrolment, patching, configuration profiles, and compliance.
Be the first responder for colleague IT and access questions, and resolve them quickly and courteously.
Administer our core SaaS estate, including Google Workspace and GitLab access, and script away the repetitive parts.
GRC - 20%
Keep our SOC 2 evidence current in Drata. Chase down failing monitors and automate evidence collection wherever possible.
Help prepare for the yearly Type II audit and the annual pentest.
Maintain security policies and track exceptions.
Solid professional experience in IT. Desktop support, sysadmin, or endpoint management.
Hands on experience with Jamf and Git in a professional settings
Basic scripting ability in Python or Bash
Comfort with macOS and Windows administration
Familiarity with how networks, identity, and access control work.
Experience using AI tools in your own workflow
A genuine interest in security as a career. We will invest in training you, and we want that investment to land.
Patience and courtesy with end users. A large part of this job is helping colleagues, and doing it well earns the trust that makes the security work possible.
High attention to detail. Offboarding done sloppily is a security incident waiting to happen.
Exposure to Intune.
Exposure to AWS or any cloud platform.
Personal projects, a home lab, CTF experience, or security certifications in progress (Security+ or similar).
Familiarity with SOC 2 or any compliance framework.
