Platform Compliance Engineer

Overview

We're looking for a Platform Compliance Engineer to own the security posture of our Enterprise Linux and Windows systems. You'll ensure our infrastructure stays aligned with CIS Benchmark recommendations and drive a disciplined, risk-based patching program - moving fast on critical vulnerabilities and maintaining a predictable cadence for everything else. This role sits at the intersection of platform engineering and security, requiring close collaboration with both Windows/Linux platform teams and the security organization.You'll work closely with platform and security teams based in both Mumbai and Sydney, so strong written and verbal communication across time zones is important.

 

Responsibilities

Compliance & Hardening• Assess and maintain Enterprise Linux and Windows systems against current CIS Benchmark standards• Develop, update, and maintain hardening baselines and compliance policies as CIS recommendations evolve• Run regular compliance scans, track drift, and report on compliance posture across the fleet• Document exceptions and compensating controls where full compliance isn't feasible, with appropriate risk sign-off

Vulnerability & Patch Management• Monitor vulnerability feeds and scan findings to identify critical vulnerabilities requiring emergency patching• Own the end-to-end process for expedited patching of critical/high-severity vulnerabilities, including testing, deployment, and validation• Maintain a regular patch cycle for standard/lower-severity vulnerabilities across Linux and Windows environments• Track patch compliance SLAs and report on remediation timelines and outstanding exposure•Continuously improve processes to reduce manual effort and mean-time-to-remediate

Cross-Team Collaboration•Partner with Linux and Windows platform teams to plan, test, and roll out patches and hardening changes with minimal disruption•Work with security teams to prioritize remediation based on risk, exploitability, and business impact•Participate in vulnerability triage and incident response when critical issues are identified•Communicate compliance status, risks, and remediation plans to stakeholders and leadership•Act as the primary point of contact during audits, preparing and collecting evidence and providing validation or proof of compliance as required

 

What you can expect from us:

 

Real Impact: By integrating sophisticated coding techniques with innovative engineering ideas, we design and optimize systems that can process massive amounts of data while still ensuring high performance and stability. You’ll see how your contributions towards developing and supporting leading-edge hardware and software technologies make a firm-wide impact that makes us all smarter, faster, and better.

 

Collaboration: You will work closely with IT, legal, and compliance teams to address security risks, ensure adherence to internal policies, and meet regulatory requirements. Champion cybersecurity awareness and training initiatives across the organization. 

 

Growth: For many of our roles, we don’t expect you to have prior industry experience in proprietary trading or financial services to succeed at Susquehanna International Group. We’re looking for people who are naturally curious, relentless problem solvers, and have the desire to continuously innovate, learn, and grow.

 

Benefits: Susquehanna offers a wide array of competitive employee perks & benefits. 

What we’re looking for

• Experience in systems administration, security engineering, or compliance roles• Exposure to Enterprise Linux (RHEL/SLES/similar) and/or Windows Server environments - solid experience in one platform with willingness to build skills in the other is fine• Working knowledge of CIS Benchmarks and hardening frameworks• Experience with vulnerability management and patch management tools and processes• Hands-on experience with Tenable Security Center (or similar vulnerability management platforms, e.g., Qualys, Nessus)• Understanding of vulnerability scoring (CVSS) and risk-based prioritization• Excellent cross-functional communication skills, comfortable working with distributed teams

 

Preferred:

• Experience across both Enterprise Linux and Windows Server environments• Proficiency in Bash and/or PowerShell scripting• Familiarity with additional scripting languages (Python)• Experience with version control systems (Git, Perforce, or similar)• Experience building or maintaining CI/CD pipelines in Jenkins for automation and deployment workflows• Experience with configuration management/patch tools (Ansible, Puppet, Chef, SCCM, WSUS, etc.)• Experience with regulatory/compliance frameworks (NIST, PCI-DSS, HIPAA, SOC 2) as they relate to system hardening• Relevant certifications (Security+, RHCSA, MCSE, CISSP, or similar)• Familiarity with Group Policy (GPO) configuration, including troubleshooting precedence and conflict

 

 

About Susquehanna:

Susquehanna is a global quantitative trading firm founded by a group of friends who share a passion for game theory and probabilistic thinking. We have incorporated this approach into our culture, where you will find relentless problem solvers within each of our core disciplines: Trading, Technology, and Quantitative Research. From offices around the world, our employees collaborate to make optimal decisions and are driven by the desire to achieve winning results together. What we do:

We are experts in trading essentially all listed financial products and asset classes, with a focus on derivatives trading. Through market making and market taking, we handle millions of trading transactions around the world every day, providing liquidity and ensuring competitive prices for buyers and sellers. While our presence in the market is broad, our trading desks are highly specialized, allowing for a deep understanding of unique drivers of each asset class.

 

Equal Opportunity Statement

 

We encourage applications from candidates from all backgrounds, and we welcome requests for reasonable adjustments during the recruitment process to ensure that you can best demonstrate your abilities.

 

Susquehanna does not accept unsolicited resumes from recruiters or search firms. Any resume or referral submitted in the absence of a signed agreement will become the property of Susquehanna and no fee will be paid.

 

#LI-DN1 # LI-Onsite