Security Engineer

Who we are Graviton Research Capital is a privately funded quantitative trading firm striving for excellence in financial markets research. We trade across a multitude of asset classes and trading venues using a diverse range of concepts, from time series analysis and stochastic models to machine learning and statistical inference. We analyse terabytes of data to identify pricing anomalies and drive innovation in financial markets. Role Overview We are seeking a Security Engineer (Blue Team) with a deep focus on system monitoring, kernel-level logging, and detection engineering. Securing our internal systems and high-frequency pipelines is critical to our success. In this role, you will move beyond surface-level logs to own the visibility and security monitoring of our infrastructure. We aren't looking for someone to just "manage a tool," but someone who can architect our detection logic from the ground up to ensure robust attribution and real-time detection of unauthorised behaviour. Key Responsibilities and Deliverables Implement and maintain deep visibility using eBPF, auditd, and Journalctl to ensure all user activity/behaviour is captured. Standardise security configurations across systems to eliminate drift and move toward immutable setups where state is deployed from fixed images. Maintain active user's true identity across ssh-chains and limit any illegal access. Build and tune logic to detect credential leaks, anomalous privilege escalations, and violations of expected behaviour in real-time. Implement comprehensive activity logging that captures user actions regardless of shell (bash, zsh, etc.) with minimal impact on system latency. Lead incident response efforts, including forensic investigations, root-cause analysis, and remediation for security events. Partner with DevOps and Network teams to embed security into CI/CD pipelines and enforce strict Access Control Lists (ACLs). Eligibility and Required Technical Skills 5–8 years of experience in security engineering, SecOps, or systems security roles. Expert-level knowledge of Linux administration, permissions, PAM, SSH, and authentication flows. Hands-on experience with kernel-level monitoring (syscalls, eBPF) and filesystem access logs. Proven ability to design alerts for privilege escalation, credential leakage, and anomalous access patterns. Experience building and scaling centralised log collection pipelines (SIEM) using ELK, Splunk, or similar platforms. Strong proficiency in Python and Bash for automation and security enforcement. Solid understanding of certificate-based authentication and zero-trust models (Banyan experience is a plus). Bachelor's or Master’s in Computer Science or Information Security from a top-tier university. Benefits Our open and casual work culture gives you the space to innovate and deliver. Our cubicle-free offices, disdain for bureaucracy, and insistence on hiring the very best create a melting pot for great ideas and technology innovations. Everyone on the team is approachable; there is nothing better than working with friends! Our perks have you covered. Competitive compensation Annual international team outing Fully covered commuting expenses Best-in-class health insurance Delightful catered breakfasts and lunches A well-stocked kitchen 4 week annual leaves along with market holidays Gym and sports club memberships Regular social events and clubs After work parties Important Note: Employment opportunities and job offers at Graviton Research Capital will always come from Graviton Research Capital’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident that the recipient is. Our email domain is @gravitontrading.com. The official website to find and apply for job openings at Graviton Research Capital is https://www.gravitontrading.com/careers.html. Graviton Research Capital is committed to fostering an inclusive work environment that values a diverse workforce. All qualified applicants will receive consideration for employment without regard to race, religion, gender, sexual orientation, national origin, disability, or age. Show more