Information Security Engineer III

Job description

Tower is home to some of the world’s best systematic trading and engineering talent. We empower portfolio managers to build their teams and strategies independently while providing the economies of scale that come from a large, global organization. Engineers thrive at Tower while developing electronic trading infrastructure at a world class level. Our engineers solve challenging problems in the realms of low-latency programming, FPGA technology, hardware acceleration and machine learning. Our ongoing investment in top engineering talent and technology ensures our platform remains unmatched in terms of functionality, scalability and performance. At Tower, every employee plays a role in our success. Our Business Support teams are essential to building and maintaining the platform that powers everything we do — combining market access, data, compute, and research infrastructure with risk management, compliance, and a full suite of business services. Our Business Support teams enable our trading and engineering teams to perform at their best. At Tower, employees will find a stimulating, results-oriented environment where highly intelligent and motivated colleagues inspire each other to reach their greatest potential. **Responsibility** - Developing and implementing automated security solutions using Python, Bash, and related technologies to identify security exposures, optimize security infrastructure, expand capabilities, and meet business requirements. - Supporting and troubleshooting enterprise security infrastructure, including HashiCorp Vault, IAM, SIEM, and EDR platforms, while serving as an escalation point for security-related issues. - Analyzing security vulnerabilities and consulting on exploitation techniques, risk assessments, and remediation strategies to strengthen the organization's security posture. - Participating in attack simulation exercises, threat and vulnerability management initiatives, and continuous assessments to evaluate and enhance the effectiveness of security controls and incident response capabilities. - Ensuring adherence to security standards, best practices, workplace policies, and operational procedures across security engineering activities. - Collaborating with cross-functional teams to provide hands-on support, maintain effective stakeholder communication, update senior leadership on progress, and participate in incident response activities when required. **Qualifications** - A bachelor’s or master’s degree in computer science, information security, cybersecurity, or a related field, with at least 5 years of experience delivering enterprise security solutions. - Experience with Unix/Linux environments, command-line administration, shell scripting, and software development using Python and Bash, along with SIEM technologies, threat hunting, security monitoring, investigations, and security documentation. - Knowledge of the cyber threat intelligence lifecycle, including frameworks such as the Cyber Kill Chain and MITRE ATT&CK, with an understanding of cyber threats in the financial sector, decentralized finance (DeFi), and blockchain technologies. - Expertise in network and information security technologies, including IDS/IPS, NAC, DLP, VPN, firewalls, endpoint security, anti-malware, database auditing and monitoring, secure architecture design, logging, packet capture, email security, directory services, authentication, remote access, encryption, cloud security controls, and database security; experience with reverse engineering, wireless security, web application vulnerabilities (SQL injection, XSS, CSRF), exploit development, and C/C++ is preferred. - The ability to mentor and guide security analysts, work independently with minimal supervision, collaborate across distributed teams and time zones, and effectively use collaboration and workflow tools such as Jira and Confluence. - Strong analytical, critical thinking, problem-solving, written communication, and documentation skills, with the ability to perform under pressure, adapt to evolving security challenges, and demonstrate a self-driven approach to continuous learning and team development. Tower’s headquarters are in the historic Equitable Building, right in the heart of NYC’s Financial District and our impact is global, with over a dozen offices around the world. At Tower, we believe work should be both challenging and enjoyable. That is why we foster a culture where smart, driven people thrive – without the egos. Our open concept workplace, casual dress code, and well-stocked kitchens reflect the value we place on a friendly, collaborative environment where everyone is respected, and great ideas win. Our benefits include: - Generous paid time off policies - Savings plans and other financial wellness tools available in each region - Hybrid working opportunities - Free breakfast, lunch, and snacks daily - In-office wellness experiences and reimbursement for select wellness expenses (e.g., gym, personal training and more) - Company-sponsored sports teams and fitness events (JPM Corporate Challenge, Cycle for Survival, Wall Street Rides FAR and more) - Volunteer opportunities and charitable giving - Social events, happy hours, treats, and celebrations throughout the year - Workshops and continuous learning opportunities At Tower, you’ll find a collaborative and welcoming culture, a diverse team and a workplace that values both performance and enjoyment. No unnecessary hierarchy. No ego. Just great people doing great work – together. Tower Research Capital is an equal opportunity employer.