Junior Security Engineer

London Metal Exchange Limited; Greater London; On-site; GBP 30,000 - 40,000; Full time

Job summary

A leading financial exchange is seeking a Junior Security Engineer in London. This entry-level position focuses on security engineering and automation across various systems. Key responsibilities include deploying security tools, implementing access controls, and supporting incident response activities. A university degree in a STEM field is required, along with knowledge of IAM, networking protocols, and scripting languages. Candidates must have enthusiasm for security and be adaptable to a fast-paced environment.

Qualifications

• A University degree or equivalent qualifications in a STEM subject
• Entry-level certifications such as CompTIA Security+, Microsoft SC-900, or AWS Cloud Practitioner are desirable.
• Up to 2 years of experience in IT, security engineering, or DevOps.

Responsibilities

• Assist in deploying and maintaining security tools and platforms.
• Contribute to Infrastructure as Code (IaC) efforts using Terraform or Ansible.
• Help monitor and maintain secure configurations across environments.
• Assist in implementing role-based access controls and least privilege principles.
• Support the integration of security controls into CI/CD pipelines.

Skills

IAM concepts and tools

Networking and security protocols

Operating systems

Scripting or programming languages

CI/CD tools and cloud platforms

Security Tooling

Education

University degree in STEM

Entry-level certifications (CompTIA Security+, Microsoft SC-900, AWS Cloud Practitioner)

Tools

Ansible

Terraform

Python

PowerShell

Bash

E-Mail Security

DLP

SIEM

Endpoint Protection

Job description

Junior Security Engineer**Shift Pattern:**Standard 40 Hour Week (United Kingdom)**Scheduled Weekly Hours:**40**Corporate Grade:**F - Officer**Reporting Line:**(UK Division) Information Technology**Location:**UK-London**Worker Type:**Permanent**Overall Purpose of Role**This role is an entry-level position within the Information Security team at the London Metal Exchange (LME). This role supports the secure delivery and operation of infrastructure and applications, identity and access management (IAM), and secure configuration management, with a strong focus on automation across each discipline.The successful candidate will work closely with IT Engineering, Security Operations, and Infrastructure teams to ensure that security controls are effectively implemented and maintained across LME’s platforms. This is a hands-on role ideal for early-career professionals with a strong interest in security engineering, DevOps practices, and technology aspects of IAM.**Key Responsibilities:****Security Engineering & Automation*** Assist in the deployment and maintenance of security tools and platforms (e.g., E-Mail Security, DLP, SIEM, Endpoint Protection).* Develop and support the automation of security tools, configuration, and updates using scripting (e.g. Python, PowerShell, Bash, NPM).* Contribute to Infrastructure as Code (IaC) efforts using Terraform or Ansible.* Help monitor and maintain secure configurations across Windows, Linux, and kubernetes environments.**Identity & Access Security*** Assist in implementing role-based access controls (RBAC) and least privilege principles in code.* Help automate IAM workflows and integrate identity controls into CI/CD pipelines.* Support the implementation of access controls and enforcement of least privilege across platforms and services.* Help automate access governance workflows and integrate identity-related controls into development and operational pipelines.* Assist in access reviews and the secure onboarding/offboarding of users and systems.**DevOps Integration*** Contribute to the integration of security controls into CI/CD pipelines (e.g., SAST, DAST, secrets management).* Collaborate with engineering teams to embed security into build and deployment processes.* Participate in the development of secure, scalable, and resilient infrastructure solutions.**Operational Support*** Provide support for incident response and troubleshooting related to security tooling and access controls.* Provide support for Red/Blue team testing and penetration testing.* Help maintain documentation, standards, and procedures related to security engineering and platform protection.* Participate in on-call and weekend support rotations as needed.**Qualifications Required:*** A University degree or equivalent qualifications in a STEM subject such as Computer Science, or Engineering and/or Information Systems.* Desirable: Entry-level certifications such as CompTIA Security+, Microsoft SC-900, or AWS Cloud Practitioner.**Required Knowledge and Experience:*** Up to 2 years of experience in IT, security engineering, or DevOps (internships or academic projects included).* Basic understanding of: + IAM concepts and tools (e.g., LDAP, oAuth, IdP). + Networking and security protocols (TCP/IP, HTTPS, DNS, Firewalls, Proxy). + Operating systems (Windows, Linux/Unix, Kubernetes). + Scripting or programming (Python, Bash, PowerShell). + CI/CD tools and cloud platforms (e.g., Ansible Tower, Bitbucket, Hashicorp Vault, Pipelines, AWS, Azure) + Security Tooling (e.g. EDR, SIEM, Antivirus)**Personal Qualities:*** Curiosity about emerging threats and technologies* Ability to assess and prioritize tasks/risks* Attention to detail* Enthusiastic about security engineering and automation.* Strong analytical and problem-solving skills.* Effective communicator with good documentation habits.* Team-oriented, proactive, and adaptable in a fast-paced environment.* Willingness to learn and grow within a critical infrastructure environment.* Commitment to continuous learning*The LME is committed to creating a diverse environment and is proud to be an equal opportunity employer. In recruiting for our teams, we welcome the unique contributions that you can bring in terms of education, ethnicity, race, sex, gender identity, expression and reassignment, nation of origin, age, languages spoken, colour, religion, disability, sexual orientation and beliefs. In doing so, we want every LME employee to feel our commitment to showing respect for all and encouraging open collaboration and communication.*Hong Kong Exchanges and Clearing Limited (HKEX) is a publicly-traded company (HKEX Stock Code:388) and one of the world’s leading global exchange groups, offering a range of equity, derivative, commodity, fixed income and other financial markets, products and services, including the London Metals Exchange.As a superconnector and gateway between East and West, HKEX facilitates the two-way flow of capital, ideas and dialogue between China and the rest of world, through its pioneering Connect schemes, increasingly diversified product ecosystem and its deep, liquid and international markets.HKEX is a purpose-led organisation which, across its business and through the work of HKEX Foundation, seeks to connect, promote and progress its markets and the communities it supports for the prosperity of all.