Threat Specialist

As a Threat Specialist at DRW, you join our global Security Operations team in London to help protect a diversified trading firm operating across Fixed Income, ETFs, Equities, FX, Commodities, Energy, real estate, venture capital, and cryptoassets. You will triage security alerts, respond to incidents, manage threat detections, and work alongside industry-leading engineers to build a more resilient security posture.

What you'll do

• Perform triage of global security alerts from multiple sources including IPS, Web Security, Event Logs, Endpoint Protection, Brand Protection, and Phishing
• Respond to incidents identified from analysis of security alerts
• Triage and route internal support tickets sent to the Security team
• Create and revise threat detections
• Perform SIEM product administration for event correlation and threat detection
• Manage SOAR playbooks, dashboards, and product administration
• Provide insider threat investigation assistance to internal stakeholders
• Drive automated detection, response, and configuration using scripting and programming languages
• Evaluate commercial and open-source security tools as needed
• Collaborate with internal Infosec peers to continuously improve security posture
• Contribute to internal documentation of standard processes and procedures
• Educate users on security best practices
• Assess security risks for new projects and initiatives
• Attend security conferences, seminars, and training to stay current with the evolving security landscape

What you bring

• A bachelor's degree or equivalent 1-3 years of industry experience
• Interest in digital forensics and physical security
• A passion for security and problem solving
• Heightened attention to detail and forward thinking
• Strong knowledge of Windows, MacOS, or Linux with an interest in learning other platforms
• Knowledge of the Incident Response Cycle
• Knowledge of static and dynamic malware analysis, including network packet captures
• Knowledge of core networking and cloud security concepts
• Experience with Security Information and Event Management (SIEM) products
• Experience with Endpoint Detection and Response (EDR) products
• Experience with SOAR (Security Orchestration, Automation, and Response) products
• Experience with data analysis of events from security sources such as IPS, Web Security, Endpoint Protection, and Event Logs
• Experience working with GitHub
• Experience with PowerShell, Bash, Python, Ruby, or Perl
• Exceptional time management skills
• Excellent verbal and written communication skills

About DRW

DRW is a diversified trading firm with over three decades of experience, headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia. Operating with our own capital across traditional and non-traditional asset classes, we value autonomy, integrity, and a willingness to challenge consensus.