Information Security Engineer III

Tower is home to some of the world’s best systematic trading and engineering talent. We empower portfolio managers to build their teams and strategies independently while providing the economies of scale that come from a large, global organization. Engineers thrive at Tower while developing electronic trading infrastructure at a world class level. Our engineers solve challenging problems in the realms of low-latency programming, FPGA technology, hardware acceleration and machine learning. Our ongoing investment in top engineering talent and technology ensures our platform remains unmatched in terms of functionality, scalability and performance. At Tower, every employee plays a role in our success. Our Business Support teams are essential to building and maintaining the platform that powers everything we do — combining market access, data, compute, and research infrastructure with risk management, compliance, and a full suite of business services. Our Business Support teams enable our trading and engineering teams to perform at their best. At Tower, employees will find a stimulating, results-oriented environment where highly intelligent and motivated colleagues inspire each other to reach their greatest potential. Responsibility Developing and implementing automated security solutions using Python, Bash, and related technologies to identify security exposures, optimize security infrastructure, expand capabilities, and meet business requirements. Supporting and troubleshooting enterprise security infrastructure, including HashiCorp Vault, IAM, SIEM, and EDR platforms, while serving as an escalation point for security-related issues. Analyzing security vulnerabilities and consulting on exploitation techniques, risk assessments, and remediation strategies to strengthen the organization's security posture. Participating in attack simulation exercises, threat and vulnerability management initiatives, and continuous assessments to evaluate and enhance the effectiveness of security controls and incident response capabilities. Ensuring adherence to security standards, best practices, workplace policies, and operational procedures across security engineering activities. Collaborating with cross-functional teams to provide hands-on support, maintain effective stakeholder communication, update senior leadership on progress, and participate in incident response activities when required. Qualifications A bachelor’s or master’s degree in computer science, information security, cybersecurity, or a related field, with at least 5 years of experience delivering enterprise security solutions. Experience with Unix/Linux environments, command-line administration, shell scripting, and software development using Python and Bash, along with SIEM technologies, threat hunting, security monitoring, investigations, and security documentation. Knowledge of the cyber threat intelligence lifecycle, including frameworks such as the Cyber Kill Chain and MITRE ATT&CK, with an understanding of cyber threats in the financial sector, decentralized finance (DeFi), and blockchain technologies. Expertise in network and information security technologies, including IDS/IPS, NAC, DLP, VPN, firewalls, endpoint security, anti-malware, database auditing and monitoring, secure architecture design, logging, packet capture, email security, directory services, authentication, remote access, encryption, cloud security controls, and database security; experience with reverse engineering, wireless security, web application vulnerabilities (SQL injection, XSS, CSRF), exploit development, and C/C++ is preferred. The ability to mentor and guide security analysts, work independently with minimal supervision, collaborate across distributed teams and time zones, and effectively use collaboration and workflow tools such as Jira and Confluence. Strong analytical, critical thinking, problem-solving, written communication, and documentation skills, with the ability to perform under pressu…