# Threat Specialist

[DRW](https://www.jorb.ai/firms/drw.md) · London · United Kingdom · [Networking & Systems Engineering](https://www.jorb.ai/jobs/networking-systems-engineering.md)

DRW is hiring a Threat Specialist in London. Posted 2026-09-23; applications close 2026-11-22.

**Apply**: https://job-boards.greenhouse.io/drweng/jobs/8208116

Posted 2d ago.

## Role details

## DRW Overview

DRW is a diversified trading firm with over three decades of experience, bringing sophisticated technology and exceptional people together to operate in markets around the world. We value autonomy and the ability to quickly pivot to capture opportunities, operating using our own capital and trading at our own risk.

Headquartered in Chicago with offices throughout the U.S., Canada, Europe, and Asia, we trade a variety of asset classes including Fixed Income, ETFs, Equities, FX, Commodities, and Energy across all major global markets. We have also leveraged our expertise and technology to expand into three non-traditional strategies: real estate, venture capital, and cryptoassets.

We operate with respect, curiosity, and open minds. The people who thrive here share our belief that it’s not just what we do that matters—it's how we do it. DRW is a place of high expectations, integrity, innovation, and a willingness to challenge consensus.

## Security Operations: Threat Specialist

Our global Security Operations team is looking for a talented Threat Specialist to join the team in our London office. To flourish in this role, you will need a strong drive to learn and improve. When it comes to new technology, you’ll enjoy researching and evaluating new solutions using custom and commercial testing tools. You will be given the freedom and resources while being mentored by industry-leading engineers, all to provide you with the best possible environment to succeed at DRW.

## Responsibilities

- Perform triage of global security alerts generated from various sources (including IPS, Web Security, Event Logs, Endpoint Protection, Brand Protection, Phishing).

- Respond to any incidents identified from analysis of security alerts.

- Triage and route internal support tickets sent to the Security team.

- Creation and revision of threat detections.

- Perform SIEM product administration for event correlation and threat detection.

- Perform SOAR playbook/dashboard management and product administration.

- Provide insider threat investigation assistance to teams of internal stakeholders.

- Drive automated detection, response, and configuration through various scripting and programming languages.

- Evaluate commercial and open-source tools as needed.

- Collaborate with internal Infosec peers to continuously improve security posture.

- Contribute to internal documentation of standard processes and procedures.

- Educate users on security best practices.

- Assess security risks as they relate to new projects and initiatives.

- Attend security conferences, seminars, and regular training to stay ahead of the ever-changing security landscape.

## Qualifications & Skills

- A bachelor’s degree, or equivalent experience for 1-3 years in industry.

- Interest in digital forensics and physical security.

- A passion for security and problem solving.

- Heightened attention to detail and forward thinking.

- Strong knowledge of either Windows, MacOS, or Linux, with an interest in learning the details of platforms you may not have experience with.

- Knowledge of the Incident Response Cycle.

- Knowledge of static and dynamic malware analysis, including network packet captures.

- Knowledge of core networking and cloud security concepts.

- Experience with Security Information and Event Management (SIEM) products.

- Experience with Endpoint Detection & Response (EDR) products.

- Experience with SOAR (Security Orchestration, Automation, and Response) products.

- Experience with data analysis of events in security-related sources such as IPS, Web Security, Endpoint Protection, Event Logs.

- Experience working with GitHub.

- Experience with PowerShell, Bash, Python, Ruby, or Perl.

- Exceptional time management skills.

- Excellent verbal and written communication skills.

For more information about DRW's processing activities and our use of job applicants' data, please view our Privacy Notice at https://drw.com/privacy-notice.

## Applying to this role

This Threat Specialist role at DRW runs through the firm's own careers portal and expects a CV and cover letter written specifically for the posting, not a portable submission carried across firms. Jorb AI's application agent tailors a CV and cover letter from your background to this posting and tracks the role alongside the rest of your applications.

[Tailor this application](https://www.jorb.ai/signup?ref=job-atom&firm=drw&job=6ab3c000e3d8ce60ef2963b3)

## More open roles at DRW

- [Software Developer Intern (Python)](https://www.jorb.ai/jobs/6ab62a716fb13ffea95b02db.md) – Singapore, posted 1d ago
- [Receptionist](https://www.jorb.ai/jobs/6aad99344a29f98f78f37837.md) – London, posted 7d ago
- [Data Analyst](https://www.jorb.ai/jobs/6aad28995e584a77068c800a.md) – London, posted 7d ago
- [Trade Support Engineer](https://www.jorb.ai/jobs/6aacf0414eebcb3a5a7669b4.md) – Singapore, posted 8d ago
- [IT Intern](https://www.jorb.ai/jobs/6a984862d1a607f7b89a085a.md) – Singapore, posted 23d ago

## Other open Networking & Systems Engineering roles

- [Systems Administrator (New York)](https://www.jorb.ai/jobs/6a8562eeb2793d0b5999e291.md) at [D. E. Shaw](https://www.jorb.ai/firms/d-e-shaw.md) – New York, posted 1mo ago
- [Systems Engineering Intern (London) - Summer 2027](https://www.jorb.ai/jobs/6a1d8c785934adb8262c10c0.md) at [D. E. Shaw](https://www.jorb.ai/firms/d-e-shaw.md) – London, posted 3mo ago
- [Cyber Security Engineer](https://www.jorb.ai/jobs/6ab62ba6b07cc4473145bbdb.md) at [Keppel](https://www.jorb.ai/firms/keppel.md) – Singapore, posted 1d ago
- [Data Center Technician](https://www.jorb.ai/jobs/6ab3fa99a0882642fc15a54b.md) at [Microsoft](https://www.jorb.ai/firms/microsoft.md) – Singapore, posted 2d ago
- [College Intern - Summer 2027 - End User Computing](https://www.jorb.ai/jobs/6ab3f83b0d697f0352da7b0e.md) at [CDPHP](https://www.jorb.ai/firms/cdphp.md) – New York, posted 3d ago

---

Updated: 2026-09-26
Canonical: https://www.jorb.ai/jobs/6ab3c000e3d8ce60ef2963b3
