The security varies a lot. At one hedge fund I interviewed at, security was almost MI5-like - no phones in the office, no direct internet access, etc. At the place I ended up working, it's rootapalooza. Not in prod, obviously - there it's sudo-a-gogo.