Windows Security Engineer

Role Title: Windows Security Engineer (Systems and Infrastructure team) Department: Technology Location: Bangalore About Caxton Associates: Caxton Associates, founded in 1983, is a global trading and investment firm with offices in New York, London, Singapore, Monaco and Dubai, and launching Bangalore in 2026.
Caxton Associates’ primary business is to manage client and proprietary capital through global macro hedge fund strategies.
  As part of our continued growth, we are establishing a new office in Bangalore, India.
This office will play a critical role in supporting our trading, research, and operations globally.
  About the role: We are seeking a Windows Security Engineer to join the Systems and Infrastructure team.
The role will be focused on hardening, monitoring, and improving security across endpoints, servers, identity systems, and supporting infrastructure.
The successful candidate will play a key role in the Systems and Infrastructure team, contributing to the operational efficiency, reliability, and security of our Windows infrastructure.
Responsibilities: Manage and optimize Microsoft Defender, EDR/XDR tooling, vulnerability scanners, and patching processes.
Implement and maintain Windows security controls (Group policy, baseline hardening, endpoint protection, logging).
Continuously improve the core security controls that protect Windows systems across the organization.
Monitor security alerts, investigate incidents, and assist with remediation.
Support and improve identity and access management (Active Directory, Azure AD, conditional access, MFA).
Perform regular security assessments, configuration reviews, and compliance checks.
Develop and maintain security documentation, playbooks, and automation scripts (PowerShell / Python).
Collaborate on architecture reviews and secure deployments.
Experience: Strong knowledge of Windows OS internals, Active Directory, Group Policy, and Windows security baselines At least 5 years’ experience working in a similar role Experience with EDR platforms, SIEM tools, and security monitoring Automation using PowerShell (and/or Python) Deploy and support Enterprise Windows systems and third-party applications Familiarity with vulnerability management and patching tools Understanding of network security fundamentals (firewalls, DNS, TLS, authentication flows) Exposure to Azure security controls (Defender for Cloud, conditional access, identity protection) Ability to investigate systems issues and applications as required.
Highly self-motivated and directed, with keen attention to detail.
Proven analytical and creative problem-solving abilities.
Communicates clearly and works well cross-functionally.
Operates with the highest degree of ethics and integrity.
The following would be highly beneficial: Experience with Intune Knowledge of AWS Infrastructure Understanding of Zero Trust principles