Job Description

Job Title

Senior Infrastructure Security Engineer

So, who are we?

The tasty family of companies is committed to empowering individual investors and traders by providing educational media, intuitive and powerful trading software, high-speed order execution, competitive pricing, and innovative financial products. Our engineers have access to a wide range of tools and technologies, offering the opportunity to tackle diverse problems while honing expertise in specific areas. We are looking for self-motivated, engineering-driven professionals who are pragmatic, enjoy working in a fast-paced environment, and take pride in creating and operating large-scale, highly available , and high-performance systems. With a lean team and a management philosophy that values autonomy, you'll have the freedom to shape impactful solutions.


We work in cross-functional teams and are laser-focused on increasing the number of active clients we serve to drive sustainable growth.

Your Team

The tastytrade infrastructure team is responsible for maintaining the stability, security and performance of our back-end systems, which directly impacts the experience of our customer-facing applications . Reporting directly to the Chicago based infrastructure management, y ou will be part of the team that ensure s tastytrade's infrastructure is secure , reliable and well positioned to support the business as it continues to scale .

Your Role in the Team's Success

As a Senior Infrastructure Security Engineer, you'll be responsible for supporting, maintaining , automating, and improving our IT Security platforms. You will perform a variety of technical tasks within the Infra structure Engineering team, ensuring the smooth and effective operation of a growing set of security products and solutions. Beyond maintenance, you will be the go-to person for security tooling, offering guidance and consultation to developers and engineers to ensure a best practice, "security-by-design" culture within the business.

What You'll Do

Security Integration & Migration

Lead the transition from Rapid7 to Qualys for comprehensive vulnerability management Collaborate with infrastructure teams to establish SLAs for patching and remediation processes Integrate tastytrade 's systems with Google Chronicle, fine-tuning alerts to meet tasty trade's infrastructure and engineering team requirements

Contin

uous

Improvement

Perform necessary upgrades and troubleshoot issues across all security tools, with focus on Hashi C orp Vault platforms, plus AWS native security tooling Maintain and enhance scripts and utilities within Git Hub that support our security operations Drive improved integration between security tools to e nable new capabilities and solve existing challenges Adapt security tools to evolving requirements, keeping pace with tastytrade's technology roadmap and industry best practices

Who you are

You're passionate about the client experience, and the rapidly evolving world of fintech . You a ctively evaluate existing security approaches, identifying opportunities to modernize legacy processes and eliminate technical debt


You're comfortable d riv ing cultural change , looking to c hallenge traditional security mindsets that create friction, advocating for security solutions that enhance rather than hinder developer productivity . You r mindset is to s tay ahead of industry trends, piloting new security technologies and methodologies that can provide competitive advantages . You're naturally able to b ridge silos

,

b reak down barriers between security, infrastructure, and development teams by demonstrating how integrated approaches solve complex problems more effectively .

What You'll Need for This Role

This is a role with significant independence. Candidates are expected to satisfy most of the listed technical requirements while possessing the ability to work both independently and as part of a team. Successful candidates will demonstrate an independent and self-motivated approach to continuing the development of their skills and knowledge.

Technical Requirements:

5

+

years' experience

in technology or security roles in an enterprise environment

Public Cloud:

AWS experience preferred, with knowledge of security services and best practices

Infrastructure as Code:

Proficiency in Terraform for automated infrastructure deployment

Scripting & Programming:

Strong skills in Python, Go, and/or Bash for automation and tooling

Networking & DNS:

Solid understanding of network security principles and DNS management

Version Control:

Experience with GitHub workflows and CI/CD pipelines

Operating Systems:

Linux system administration and security hardening

Security Foundations:

Understanding of core security concepts, threat modelling, and security frameworks

Preferred

Experience

Experience with SIEM /SOAR platforms (Google Chronicle preferred) Vulnerability management platform experience (Qualys, Rapid7) Advanced website/app pro tection ( W eb application firewall , F 5 App Pro tect ) Secrets management ( HashiCorp Vault) Containers (Nomad/Kubernetes) & Virtualization Terraform & Scripting languages (Python/Go/Bash) Cloud security posture management tools (Wiz) Financial services or fintech industry experience

The perks

Your growth fuels our success! Thrive with tailored development programs, mentoring opportunities with leaders, and clear career progression. Expand your network through committees, sports and social clubs. Enjoy extra time off for volunteering and community work.


Matched giving for your fundraising activity Flexible working hours and work-from-home opportunities Performance-related bonuses Insurance and medical plans Career-focused technical and leadership training in-class and online, incl. unlimited access to LinkedIn Learning platform Contribution to gym memberships and more Free Lunch/Snacks/Fruits A day off on your birthday Two days' volunteering leave per year.




Join us in building secure, scalable platforms that power the future of trading technology!

Apply now!

Number of openings

1