Software Engineer - Go & Python (Core Services)

Qube Research & Technologies

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology- and data-driven group implementing a scientific approach to investing. Combining data, research, technology, and trading expertise has shaped our collaborative mindset, which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high-quality returns for our investors. You will join the Security team, working closely with Software Engineers and Infrastructure teams to embed security into the design, development, and operation of systems across cloud services, business applications, and core infrastructure. Your Future Role within QRT You will: * Support the implementation and operation of product security controls across cloud services, core infrastructure, and business applications on Windows and Linux platforms * Work with engineering teams to integrate security into system design and development, applying practical approaches suitable for fast-moving environments * Contribute to secure software development practices, including supporting security reviews across languages such as Python, C++, Rust, Go, and Kotlin/Java * Perform threat modelling, vulnerability assessments, and security code reviews with guidance from senior team members * Assist with integrating and operating security tooling (e.g., SAST, DAST, dependency scanning) within CI/CD pipelines and runtime environments * Identify security risks and contribute to remediation and mitigation plans with engineering teams * Perform vendor security reviews to assess third-party security practices against internal standards * Build your product security knowledge and share learnings with peers across engineering teams Your Present Skillset * 3–5 years of experience in product security, application security, software engineering, or a related role * Hands-on experience with secure coding practices and at least one of: Python, C++, Rust, Go, Kotlin/Java * Solid technical foundation in software development, system architecture, or infrastructure, with a strong interest in security * Working knowledge of security principles and common vulnerabilities affecting software, cloud platforms, and business applications * Experience securing Windows and/or Linux-based systems * Practical experience with at least one cloud platform (AWS or Microsoft Azure), ideally in hybrid environments * Familiarity with threat modelling, vulnerability management, and risk assessment concepts * Experience using or integrating security scanning tools into development workflows and/or CI/CD pipelines * Strong problem-solving skills, clear communication, and willingness to learn in a fast-paced environment * Exposure to low-latency or performance-sensitive systems * Experience in financial services and/or regulated environments * Interest in automation and security tooling development QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

Qube Research & Technologies

Qube Research & Technologies (QRT) is a global quantitative and systematic investment manager, operating in all liquid asset classes across the world. We are a technology and data driven group implementing a scientific approach to investing. Combining data, research, technology and trading expertise has shaped QRT’s collaborative mindset which enables us to solve the most complex challenges. QRT’s culture of innovation continuously drives our ambition to deliver high quality returns for our investors.  Your future role within QRT QRT is hiring a Senior Product Security Engineer to protect diverse tech systems across cloud, business apps, and core infrastructure. In this role, you’ll drive automated security processes, influence architecture, and lead strategic security projects. Working closely with IT, cloud, and engineering teams, you'll implement security solutions for low-latency systems and multi-cloud platforms, including AWS, Azure, and Alibaba Cloud. You'll also secure hybrid infrastructures across Python, C++, and Kotlin/Java environments, ensuring robust protection that supports QRT’s high-speed, data-driven operations. * Support the implementation of security controls and processes for product security, focusing on a broad range of systems, including core trading infrastructure, cloud services, and business applications across both Windows and Linux environments. * Collaborate with engineering and product teams to integrate security into product design and development, applying your experience in securing large-scale software systems in a fast-moving environment. * Contribute to the development and maintenance of a secure software development lifecycle (SDLC) with a focus on secure coding practices in languages like Python, C++, Rust, Go and Kotlin/Java. * Conduct threat modeling, vulnerability assessments and security code reviews across different platforms, ensuring security is embedded at every stage of the development lifecycle. * Provide mentorship, guidance, and training on security best practices and secure development processes to engineering teams working in mixed cloud and operating systems environments. * Perform vendor security reviews to assess third-party security practices and ensure compliance with QRT’s standards. * Integration of security scanning tools (SAST, DAST, etc.) into CI/CD pipelines and runtime environments to ensure continuous security monitoring and threat detection across Alibaba Cloud, AWS, Azure, and on-prem systems. * Proactively identify security risks and develop strategies for risk mitigation in a fast-paced high-stakes environment. Your present skillset * At least 7 years of experience in product security or similar roles with significant practical experience in securing software development at scale. * Proven record of accomplishment in secure coding practices and development experience in development languages such as Python, C++, Rust, Go and Kotlin/Java. * Strong technical background in software development, system architecture and security tools. * Strong understanding of security principles, techniques and technologies related to software and product security, cloud platforms and business applications. Knowledge of low-latency financial systems would be an advantage. * Experience working with and securing both Windows and Linux-based systems. * Extensive experience with one or more cloud platforms such as AWS, Microsoft Azure and Alibaba Cloud used in a hybrid environment. * In-depth knowledge of threat modeling, risk assessment and development of mitigation strategies for large-scale, complex systems in a fast-paced environment. * Experience integrating security scanning tools into CI/CD pipelines and runtime environments. * Experience conducting vendor security reviews and managing third-party security assessments. * Excellent leadership, problem-solving, communication and adaptability skills, suited for a senior-level position in a fast-paced environment. QRT is an equal opportunity employer. We welcome diversity as essential to our success. QRT empowers employees to work openly and respectfully to achieve collective success. In addition to professional achievement, we are offering initiatives and programs to enable employees achieve a healthy work-life balance.

Risk Ledger

ABOUT US Risk Ledger is developing a network of connected organisations, all working together to defend against cybersecurity attacks in the supply chain. Organisations rely on us to establish trust, through sharing their security maturity and visualising the risks posed by their supply chain ecosystem. And we’re already trusted by customers like ASOS, British Airways, BAE Systems and the NHS. We are putting together an amazing and talented team from a diverse set of backgrounds and skillsets to drive us towards our vision. Risk Ledger is built on the respect we have for one another and our users, united by our shared values and mission. Every one of us is still learning: it’s how we grow as individuals. We’re curious. We’re ambitious. And we’re humble and honest. At Risk Ledger, we aim high to find the best solutions we can and always put our users first. THE TEAM: You'll join a cross-functional department of Software Engineers, Product Managers and Designers, all collaborating with the wider business to achieve impactful product outcomes. You'll be part of a small, growing Platform team, working closely with the wider engineering function. We care deeply about building the right thing, in order to fundamentally shift mindsets in the cybersecurity industry. We ship quickly and continuously in order to learn and iterate, whilst always pushing for a high quality bar and keeping security and automation front and centre - the latter two being critical components of this role. The core of our stack is Golang, Typescript (VueJS), PostgreSQL , AWS, Google Cloud and Grafana Cloud, with modern design philosophies and a cloud-native approach. THIS ROLE: This role combines aspects of Platform Engineering, Site Reliability Engineering, Developer Experience, and DevSecOps. Working alongside the wider team, you'll build and maintain the foundational systems, tools, and practices that enable our engineering teams to deliver secure, scalable, and reliable software efficiently at pace. You'll be hands-on across the stack, contributing to the standards and consistency we hold across the engineering organisation, and you should expect to manage multiple priorities and operate at varying levels of detail. You'll join a team that treats our platform as a product, putting the developer experience at the heart of everything you do. Your mission is to build a seamless, secure and reliable path from code to production, enabling our engineering teams to ship value quickly and safely. Day-to-day, you’ll collaborate with engineers, product managers, technical leadership and the wider business on strategic initiatives that deliver real value to our customers. IN THE ROLE YOU WILL; * Build and maintain scalable, resilient cloud infrastructure. Working across our products and supporting services, you'll develop and maintain our cloud services and infrastructure in AWS (primary) and GCP. You'll build and operate environments using Terraform and patterns like container orchestration on ECS/EKS , while helping to improve observability, reliability and performance. * Accelerate product delivery through platform engineering. Contribute to the build of pipelines, tooling and internal platforms that enable fast, safe, automated that seeks to reduce friction across the delivery lifecycle. * Improve developer experience with self-service tooling and standardisation. Help build the frameworks, tools, self-service platforms and golden paths that streamline workflows, eliminate toil, and promote consistent best practices, so software engineers can focus on high-value customer delivery. * Support reliability and sacabibility through SRE principles and proactive operations. In partnership with product and engineering teams, you'll participate in incident response, help define and monitor SLI/SLO/SLAs, and work to optimise systems for availability, resilience, performance, and cost. * Embed security across the engineering lifecycle. Help integrate shift-left security practices into CI/CD pipelines and product workflows so vulnerabilities are caught early and consistently. Support the management of secrets, credentials, and identity access controls, and help enforce compliance through automated policies. * Contribute to a strong security posture. Working with our Information Security team, you'll help monitor, triage and respond to security events, and support a strong security posture through continuous vulnerability scanning, dependency management and threat modelling. * Move fast, with an eye for quality. You enjoy moving fast while maintaining a high quality bar through testing, automation, discipline, consistency and best practice, whilst treading a careful line in pragmatism and cost-benefit analysis. * Share knowledge and grow. You'll share what you know with colleagues, support more junior engineers, and actively grow your own technical and architectural skills with the team around you. * Support our AI/ML platform tooling. From time to time you'll help maintain the infrastructure and supporting tooling behind our AI and ML capabilities (e.g. Vertex AI on GCP, AWS Bedrock, and LLM observability tooling such as Langfuse). This is a supporting part of the role rather than its focus. YOU'LL HAVE; * Experience working in engineering teams building a customer-focused SaaS product, weighing delivering value to clients against technical excellence. * 4+ years of experience in Platform Engineering, SRE, or DevOps roles. * Good working knowledge of cloud platforms (AWS and/or GCP), managed services and infrastructure automation tools (Terraform or similar). * Proficiency in containerisation and orchestration (Containers, ECS, Kubernetes a plus). * Proficiency in one or more programming or scripting languages (such as Go, TypeScript/JavaScript, Python or Bash), with a background in software engineering being a major plus. * Experience building or maintaining CI/CD systems (GitHub Actions preferable, ArgoCD etc). * Experience with monitoring, alerting and logging stacks (the Grafana stack: Prometheus, Loki, Tempo; plus OpenTelemetry). * A working understanding of networking and distributed systems. * A working understanding of security and an interest in DevSecOps. * An ability to work through ambiguity, and comfort tackling problems that aren't always well defined. * A keen sense of curiosity, with a natural drive to learn and grow. * A passion to work collaboratively with others. We like to work as a team, not a collection of individuals, and we expect you to have the same mindset. YOU MIGHT HAVE; * Knowledge of policy-as-code. * Familiarity with supply chain security. * Exposure to cost optimisation and FinOps practices. * Experience with internal developer platforms or portal tooling (e.g. Backstage, Get Port). * Exposure to LLM observability or evaluation tooling (e.g. Langfuse). Salary range £90,000—£110,000 GBP