Cybersecurity Engineer - EU/US Timezones

Company Overview

hermeneutic research is a best-in-class proprietary trading firm and hedge fund. It deploys research-driven discretionary and systematic strategies as well as makes strategic long-term investments. The partners' decade-long history of success in trading and business building and a firm-wide cultural emphasis on alpha generation, open debate, relentless iteration, and teamwork are key to the firm's continued expansion in a challenging market environment that has hamstrung competitors. A hard-wired emphasis on risk management and opportunistic market participation ensure that hermeneutic research will continue its growth trajectory in the coming decades.

Job Overview

We’re looking for a Junior–Mid Cybersecurity Engineer who is hands‑on with security operations and excited to improve our defenses across cloud, endpoints, identity, and collaboration tooling. You’ll help run the daily security program, tune and maintain controls, investigate alerts, and contribute to projects that raise our overall security posture.

Security Engineering manages our deployed security solutions and controls, implements new security technologies, and evaluates emerging solutions for potential adoption. This role handles all day‑to‑day security operations and partners closely with IT, SRE, and Product Engineering to keep our environments safe and compliant.

Responsibilities

Operations & Monitoring

• Own day‑to‑day security operations: triage alerts, investigate events, and drive incidents through containment, eradication, and post‑incident review.
• Maintain detection rules, playbooks, and runbooks; continually reduce false positives and MTTR.
• Troubleshoot users on issues with security tooling.

Tools & Controls

• Review and harden AWS security services (e.g., IAM/SCPs, GuardDuty, Security Hub, CloudTrail/Config, KMS, WAF).
• Operate MDM for device compliance, disk encryption, patching, and baseline configurations.
• Operate AV/EDR and firewall policies; support enterprise browser security policies and extensions.
• Harden Cloud services and partners (DLP, context‑aware access, OAuth app controls, group/SSO hygiene, 2SV/passkeys).
• Conduct POCs and evaluation on security tools for adoption.
• Support IT operations when needed.

Engineering & Enablement

• Implement new security technologies and integrations; document deployments and handoffs.
• Create security automations for tooling.

Risk & Posture

• Support asset/inventory accuracy, least‑privilege access reviews, and change control.
• Assist with security reviews, vendor risk, and audit evidence for SOC 2/ISO 27001‑style controls.

Requirements

• At least 5 years of security engineering background and experience with at least one of the following: SIEM, MDM, Systems hardening, Practical Cloud Security.
• Experience in tool lifecycle implementation - from Proof of Concept through integration and till decommissioning.
• Ability to work across time-zones when needed.
• Solid understanding of computing systems and their operations.
• Ability to work in a team and flexible deliverables.
• Candidates must have working rights in the location of this role; visa sponsorship is not available.

Nice to Have

• Hands-on experience with cloud platforms (AWS/Google/Azure).
• Experience with security automation.
• First hand experience with development of security processes.
• IT Background.

Interview Process

1. CV Screening – We will review your application based on the qualifications and experience outlined above.
2. Phone Interview – An initial conversation with a member of the cybersecurity team to understand your background, technical experience, and overall fit for the role.
3. Test Assignment Review – You'll be given a technical task reviewed by the team.
4. HR Interview – A discussion with HR to explore your career motivations, expectations, and overall alignment with the role and the firm.
5. Technical Interviews – Discussions with the cybersecurity team and IT focused on system design, processes, and approach.
6. CTO Interview – Interview with the CTO to delve into your resume and skills, and discuss your career goals.
7. Co-Founder Interview – A concluding discussion to evaluate cultural fit, strategic alignment, and how you resonate with the firm's values.

Company Values

Throughout the process, you'll be assessed for cultural fit through our company valu