Platform Compliance Engineer

Overview We're looking for a Platform Compliance Engineer to own the security posture of our Enterprise Linux and Windows systems. You'll ensure our infrastructure stays aligned with CIS Benchmark recommendations and drive a disciplined, risk-based patching program - moving fast on critical vulnerabilities and maintaining a predictable cadence for everything else. This role sits at the intersection of platform engineering and security, requiring close collaboration with both Windows/Linux platform teams and the security organization.You'll work closely with platform and security teams based in both Mumbai and Sydney, so strong written and verbal communication across time zones is important.

Responsibilities Compliance & Hardening • Assess and maintain Enterprise Linux and Windows systems against current CIS Benchmark standards• Develop, update, and maintain hardening baselines and compliance policies as CIS recommendations evolve• Run regular compliance scans, track drift, and report on compliance posture across the fleet• Document exceptions and compensating controls where full compliance isn't feasible, with appropriate risk sign-off Vulnerability & Patch Management • Monitor vulnerability feeds and scan findings to identify critical vulnerabilities requiring emergency patching• Own the end-to-end process for expedited patching of critical/high-severity vulnerabilities, including testing, deployment, and validation• Maintain a regular patch cycle for standard/lower-severity vulnerabilities across Linux and Windows environments• Track patch compliance SLAs and report on remediation timelines and outstanding exposure•Continuously improve processes to reduce manual effort and mean-time-to-remediate Cross-Team Collaboration•Partner with Linux and Windows platform teams to plan, test, and roll out patches and hardening changes with minimal disruption•Work with security teams to prioritize remediation based on risk, exploitability, and business impact•Participate in vulnerability triage and incident response when critical issues are identified•Communicate compliance status, risks, and remediation plans to stakeholders and leadership•Act as the primary point of contact during audits, preparing and collecting evidence and providing validation or proof of compliance as required

Real Impact: By integrating sophisticated coding techniques with innovative engineering ideas, we design and optimize systems that can process massive amounts of data while still ensuring high performance and stability. You’ll see how your contributions towards developing and supporting leading-edge hardware and software technologies make a firm-wide impact that makes us all smarter, faster, and better.

Collaboration: You will work closely with IT, legal, and compliance teams to address security risks, ensure adherence to internal policies, and meet regulatory requirements. Champion cybersecurity awareness and training initiatives across the organization.

Growth: For many of our roles, we don’t expect you to have prior industry experience in proprietary trading or financial services to succeed at Susquehanna International Group. We’re looking for people who are naturally curious, relentless problem solvers, and have the desire to continuously innovate, learn, and grow.

Benefits: Susquehanna offers a wide array of competitive employee perks & benefits. What we’re looking for • Experience in systems administration, security engineering, or compliance roles• Exposure to Enterprise Linux (RHEL/SLES/similar) and/or Windows Server environments - solid experience in one platform with willingness to build skills in the other is fine• Working knowledge of CIS Benchmarks and hardening frameworks• Experience with vulnerability management and patch management tools and processes• Hands-on experience with Tenable Security Center (or similar vulnerability management platforms,