Security Engineer

The Team

This is an outstanding opportunity to join Man Group's Security Engineering team within Technology. Man Group's business is powered by sophisticated technology, with AI accelerating the next generation of transformation. Our technology stack is built on modern open-source components, both enabling day-to-day research and development and supporting our 24-hour trading.

With the adoption of AI agents, we are investing in security as a first-class concern. Man has a sophisticated AI platform – MAIA – that offers the best foundation models on our modern technology stack. As agents become more powerful, the security platform that supports safe agentic workflows is critical.

We are seeking a Senior Security Engineer to build and run the components that put these principles into practice: a policy engine and APIs that allow applications, AI agents and users to authenticate, with authorisation supported by scoped, short-lived credentials. This is a hands-on engineering role, securing Man's applications and services.

Role Responsibilities

Platform Engineering

• Design, build and operate security platform services and APIs such as policy decision, just-in-time access and short-lived credential issuance
• Write and maintain policy-as-code that is tested, version-controlled and deployed through GitOps
• Integrate the platform with identity providers (Entra/AD), secrets management (Vault) and existing internal infrastructure (Keycloak, Sailpoint)
• Run services to production standards for reliability, performance and observability, including 2nd line on-call support

Enablement and Detection

• Provide Python APIs and onboard application teams and AI-agent developers to the platform, with documentation that makes the secure path the easy one
• Build logging, metrics and alerting for platform services, and contribute SIEM detection rules

Key Competencies

Essential

• Hands-on experience building and operating production services with Python
• Using Kubernetes, Linux and containerised environments, including networking fundamentals and performance troubleshooting
• Solid understanding of authentication, authorisation and secrets management (OIDC/OAuth, Azure AD/Entra ID, vault technologies)
• Experience with infrastructure-as-code (e.g., Terraform, Ansible, Helm) and GitOps-based deployment
• Working knowledge of observability stacks (e.g., ELK, Prometheus, Grafana), including building dashboards and alerting rules
• Clear communication and a structured approach to reasoning about risk

Advantageous

• Kubernetes knowledge beyond basic usage: network policies, pod security standards, admission controllers and resource quota enforcement
• Policy engines and workload identity (e.g., OPA/Rego, Kyverno, Cedar, OpenFGA, SPIFFE/SPIRE, Envoy/service mesh)
• API design (REST/gRPC) for internal platform consumers
• Network security controls: WAFs, segmentation, TLS termination and egress filtering

Benefits

• Modern office located in the OfficeX campus with easy access to transport and amenities.
• Hybrid working model
• Competitive compensation package
• 25 days holiday allowance
• Premium Health insurance
• Employee Assistance program
• Referral Bonus
• Additional days off for long service and volunteering
• Multisport card
• Opportunities for professional development including internal tech talks
• Conference attendance, and engagement with the open-source community