Engineering - Security engineer - Associate

About AQR Capital India

AQR is a global investment management firm built at the intersection of financial theory and practical application. We strive to deliver superior, long-term results for our clients by seeking to filter out market noise to identify and isolate what matters most, and by developing ideas that stand up to rigorous testing. Underpinning this philosophy is an unrelenting commitment to excellence in technology — powering our insights and analysis. This unique combination has made us leaders in alternative and traditional strategies since 1998.

AQR takes a systematic, research-driven approach, applying quantitative tools to process fundamental information and manage risk. Our clients include institutional investors, such as pension funds, insurance companies, endowments, foundations and sovereign wealth funds, as well as financial advisors.

Job description:

AQR is seeking a Security Engineer who will build, test, operate, troubleshoot, and maintain information security technologies for on-premises and AWS environments. This information security infrastructure provides first-line controls in a defense-in-depth approach to advanced security technologies, processes, and procedures to protect the firm’s business practices and assets. The Security Engineer will have fundamental working knowledge with infrastructure security components. A highly technical hands-on security engineer with ability to troubleshoot a diverse range of security technologies and platforms.

We are looking for a Security Engineer who is passionate about:

• Working with next-generation infrastructure security components built with an Infrastructure as Code (IaC) approach and maintained with DevSecOps processes and CI/CD pipeline

• Enabling automation on security engineering and operational tasks using scripting languages

• Serving internal clients on information security challenges and solutions

Basic Qualifications:

• Experience (6+ years) in implementing software engineering projects within security domain

• Experience (3+ years) in engineering preferably in Financial Services with regulatory requirements

• BS level technical degree or equivalent experience; Computer Science background preferred

• Team player and detail oriented, open and collaborative work ethic with a well-developed sense of ownership and responsibility, flexible, and adaptable

• Strong verbal and written communication skills, analytical thinking and problem-solving skills

• Tenacious perseverance in troubleshooting/investigating problems and processes and firm believer in established methodologies and best practices

• Highly motivated to continuously learn new security best practices and emerging technologies

Preferred Qualifications:

• Highly proficient with hands-on experience for software development in Python

• Highly proficient with hands-on experience in DevSecOps and CI/CD pipeline (e.g., Jenkins)

• Highly proficient with hands-on experience with Cloud Formation (e.g., YAML, JSON)

• Understanding of Application Security and Secure Software Development Lifecycle (S-SDLC)

• Familiarity with Security Information and Event Management (SIEM) and security analytics

• Proven extensive engineering documentation skills using productivity tools (e.g., M365)

• Support the operational changes for security systems and adhere to change control process

• Contribute to security architecture, security engineering standards, and best practice playbooks

• Earned Cloud Security Certifications (e.g., AWS Solutions Architect, DevOps, Security Specialty)