SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Pico is a global financial services company providing market data services and managed infrastructure solutions to the capital markets community. They operate offices across New York, Chicago, London, Singapore, Hong Kong, and Tokyo.
The Information Security Engineer role reports to the Chief Information Security Officer and is responsible for designing, protecting, and managing security services across Pico's global infrastructure. This is a hands-on technical position requiring expertise in security architecture, cloud security, and incident response.
Key Responsibilities:
- Design, implement, and operate security controls and systems for the company's global infrastructure
- Engineer and tune cloud security solutions including enrollments, monitoring, alerting, and security posture management
- Implement and integrate security solutions such as IDS, Identity and Access Management systems, firewalls, and related technologies
- Conduct technical design of security solutions based on business use cases and requirements
- Participate in proof-of-concepts and technical evaluations of security technologies and designs
- Monitor emerging threats and technologies; proactively assess adoption opportunities
- Reduce time-to-detect and time-to-remediate through automation of threat intelligence and sensor enrichment
- Develop and review security standards and practices
- Serve as subject matter expert in security-related areas
- Review and analyze configurations, architecture, and implementations for compliance with security standards
- Ensure systems align with industry compliance standards (SOC, ISO, etc.)
- Research and resolve IT security compliance issues
- Develop security metrics and key performance indicators
- Recommend system enhancements to improve overall security posture
Working Arrangements:
Hybrid position with weekly office time in Madrid and flexibility to work from home. Travel may be required occasionally (not regular or frequent). The role involves supporting multiple jurisdictions across EMEA, USA, and APAC time zones, requiring flexibility in working hours.
Requirements:
- Minimum 7+ years of IT experience within Information Security
- Bachelor's degree or equivalent experience
- Technical expertise in: Firewall and Intrusion Detection technologies, TCP/IP networking, Linux security, scripting languages and command-line interfaces, risk and vulnerability assessments (network, host, application), SIEM, Fortinet, Firepower IDS, AWS/GCP cloud platforms
- Strong understanding of information security engineering processes, architecture methodologies, industry best practices, and governance models (SANS, GIAC, COBIT, NIST)
- Ability to evaluate technical security controls and make management recommendations
- Excellent interpersonal, problem-solving, written and verbal communication skills
- Flexibility, self-motivation, initiative, and ability to work under pressure in fast-paced environment
- Detail-oriented, customer-focused, and able to work in team environment
- Desirable: Cloud security certifications, CCNA, CISSP, experience with SOC/ISO attestation and certification reviews
