Principal Security Engineer

<h1>Principal Security Engineer</h1> <p>Location: London (Hybrid) | <em><strong>Practice Area</strong></em>: Technology &amp; Engineering | Type: Permanent</p> <p><strong>Lead advanced security engineering initiatives that safeguard the future of digital finance</strong></p> <p><strong>The Role</strong></p> <p>As a Principal Security Engineer at Capco, you’ll lead the design and implementation of secure systems and processes across cloud and on-premise platforms. You’ll collaborate closely with engineering and client teams to embed security-by-design principles throughout the SDLC, integrate automated security tooling, and ensure resilience against evolving cyber threats. You’ll also use approved AI tools and AI-enabled workflows where appropriate to improve the speed, quality and effectiveness of security engineering, while maintaining human judgement, responsible AI guardrails and appropriate review and escalation.</p> <p><strong>What You’ll Do</strong></p> <ul> <li> <p>Design and implement enterprise-wide security controls and frameworks, using approved AI and automation where appropriate to improve security outcomes</p> </li> <li> <p>Embed security controls into CI/CD pipelines (SAST, SCA, DAST, container scanning) and enable secure SDLC practices</p> </li> <li> <p>Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows</p> </li> <li> <p>Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways</p> </li> <li> <p>Develop and evolve security standards, engineering patterns and data protection strategies</p> </li> </ul> <p><strong>What We’re Looking For</strong></p> <ul> <li> <p>Strong hands-on experience with Palo Alto, Microsoft or similar security ecosystems</p> </li> <li> <p>Deep understanding of cloud security for AWS, Azure or GCP platforms</p> </li> <li> <p>Proven expertise in secure coding, endpoint protection, SIEM and IAM</p> </li> <li> <p>Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls</p> </li> <li> <p>Proficiency in Python, Bash, PowerShell or Go for security automation and tool development, with experience implementing Zero Trust Architecture solutions</p> </li> </ul> <p><strong>Bonus Points For</strong></p> <ul> <li> <p>Certifications such as CISSP, CSSLP or cloud-specific credentials</p> </li> <li> <p>Experience building or integrating AI-enabled security tooling, automation and responsible AI guardrails</p> </li> <li> <p>Experience mentoring engineering teams and driving security awareness</p> </li> <li> <p>Advanced knowledge of DevSecOps tools and practices</p> </li> <li> <p>Exposure to financial services security and regulatory requirements, with a passion for staying current with cyber trends and emerging threat landscapes</p> </li> </ul> <p><strong>Why Join Capco</strong></p> <ul> <li> <p>Deliver high-impact technology solutions for Tier 1 financial institutions</p> </li> <li> <p>Work in a collaborative, flat, and entrepreneurial consulting culture</p> </li> <li> <p>Access continuous learning, training, and industry certifications</p> </li> <li> <p>Be part of a team shaping the future of digital financial services</p> </li> <li> <p>Help shape the future of digital transformation across FS &amp; Energy.</p> </li> </ul> <p><strong>Benefits</strong></p> <p data-start=&quot;3791&quot; data-end=&quot;3891&quot;>We offer a competitive, people-first benefits package designed to support every aspect of your life:</p> <ul data-start=&quot;3893&quot; data-end=&quot;4960&quot;> <li data-section-id=&quot;1sfk404&quot; data-start=&quot;3893&quot; data-end=&quot;4016&quot;><strong data-start=&quot;3895&quot; data-end=&quot;3913&quot;>Core Benefits:</strong> Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.</li> <li data-section-id=&quot;1yaj5pw&quot; data-start=&quot;4017&quot; data-end=&quot;4119&quot;><strong data-start=&quot;4019&quot; data-end=&quot;4037&quot;>Mental Health:</strong> Easy access to CareFirst, Unmind, Aviva consultations, and in-house first aiders.</li> <li data-section-id=&quot;1pqxiiz&quot; data-start=&quot;4120&quot; data-end=&quot;4281&quot;><strong data-start=&quot;4122&quot; data-end=&quot;4142&quot;>Family-Friendly:</strong> Maternity, adoption, shared parental leave, plus paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement.</li> <li data-section-id=&quot;1nwru6l&quot; data-start=&quot;4282&quot; data-end=&quot;4380&quot;><strong data-start=&quot;4284&quot; data-end=&quot;4300&quot;>Family Care:</strong> Eight complimentary backup care sessions for emergency childcare or elder care.</li> <li data-section-id=&quot;jxn220&quot; data-start=&quot;4381&quot; data-end=&quot;4499&quot;><strong data-start=&quot;4383&quot; data-end=&quot;4407&quot;>Holiday Flexibility:</strong> Five weeks of annual leave with the option to buy or sell holiday days based on your needs.</li> <li data-section-id=&quot;j8a7rs&quot; data-start=&quot;4500&quot; data-end=&quot;4741&quot;><strong data-start=&quot;4502&quot; data-end=&quot;4526&quot;>Continuous Learning:</strong> Your growth, your way—minimum <strong data-start=&quot;4557&quot; data-end=&quot;4590&quot;>40 hours of training annually</strong> through workshops, certifications, and e-learning. You&#39;ll also be assigned a <strong data-start=&quot;4668&quot; data-end=&quot;4699&quot;>Business Coach from Day One</strong> to support your professional development.</li> <li data-section-id=&quot;1ymgary&quot; data-start=&quot;4742&quot; data-end=&quot;4797&quot;><strong data-start=&quot;4744&quot; data-end=&quot;4766&quot;>Healthcare Access:</strong> Convenient online GP services.</li> <li data-section-id=&quot;1ehztlg&quot; data-sta…