Product Security Engineer

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology- and data-driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high-quality returns for our investors.

You will join the Security team, working closely with Software Engineers and Infrastructure teams to embed security into the design, development, and operation of systems across cloud services, business applications, and core infrastructure.

Your Future Role within QRT

You will:

Support the implementation and operation of product security controls across cloud services, core infrastructure, and business applications on Windows and Linux platforms

Work with engineering teams to integrate security into system design and development, applying practical approaches suitable for fast-moving environments

Contribute to secure software development practices, including supporting security reviews across languages such as Python, C++, Rust, Go, and Kotlin/Java

Perform threat modelling, vulnerability assessments, and security code reviews with guidance from senior team members

Assist with integrating and operating security tooling (e.g., SAST, DAST, dependency scanning) within CI/CD pipelines and runtime environments

Identify security risks and contribute to remediation and mitigation plans with engineering teams

Perform vendor security reviews to assess third-party security practices against internal standards

Build your product security knowledge and share learnings with peers across engineering teams

Your Present Skillset

3–5 years of experience in product security, application security, software engineering, or a related role

Hands-on experience with secure coding practices and at least one of: Python, C++, Rust, Go, Kotlin/Java

Solid technical foundation in software development, system architecture, or infrastructure, with a strong interest in security

Working knowledge of security principles and common vulnerabilities affecting software, cloud platforms, and business applications

Experience securing Windows and/or Linux-based systems

Practical experience with at least one cloud platform (AWS or Microsoft Azure), ideally in hybrid environments

Familiarity with threat modelling, vulnerability management, and risk assessment concepts

Experience using or integrating security scanning tools into development workflows and/or CI/CD pipelines

Strong problem-solving skills, clear communication, and willingness to learn in a fast-paced environment

Exposure to low-latency or performance-sensitive systems

Experience in financial services and/or regulated environments