C
Principal Security Engineer
Contract type
Ongoing
Work mode
Hybrid · London, United Kingdom
Experience
Lead / principal · Not stated
Level inferred from job title
Job description
A Principal Security Engineer role at Capco leading hands-on security engineering delivery for clients across financial services and other complex environments, spanning application, cloud and DevSecOps security.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Hybrid · London, United Kingdom
What you'll do
- Lead the design, implementation and technical assurance of secure solutions across applications, cloud platforms and delivery pipelines while staying hands-on with complex engineering.
- Work directly with clients to understand requirements, lead technical workshops and shape security designs, delivery plans and proposals.
- Embed security-by-design across applications, APIs, cloud workloads and the secure SDLC through threat modelling and CI/CD controls.
- Build and integrate scalable security automation using scripting, APIs, Infrastructure as Code and policy as code.
- Lead technical workstreams or specialist assignments, assure engineering quality and operational handover, mentor engineers and develop reusable standards.
- Leverage approved AI-enabled tools and automation to enhance security engineering efficiency with appropriate human oversight and guardrails.
What we're looking for
- Proven hands-on security engineering delivery and technical leadership including secure design, engineering assurance, client engagement and mentoring.
- Deep implementation expertise in one or more of Application & Product Security, Cloud & Platform Security or DevSecOps, with working knowledge of the others.
- Practical experience securing applications, APIs, cloud workloads or pipelines, with knowledge of threat modelling, vulnerability management and secure SDLC.
- Experience with at least one major cloud platform (Azure, AWS or GCP) and cloud-native security principles including IaC, containers and workload identities.
- Strong security automation capability with scripting, APIs and CI/CD tooling, plus IaC or policy as code and integrating security tools into workflows.
- Broad awareness of network and infrastructure security, IAM, monitoring and data-protection controls, able to explain technical trade-offs to clients.
- Strong understanding of security standards and best practices including ISO 27001, NIST and OWASP, translating requirements into practical engineering controls.
Nice to have
- Experience in financial services, energy or other regulated sectors, and certifications such as CISSP, CSSLP, CCSP or cloud security credentials.
- Depth across multiple priority engineering domains, software supply-chain or container security, technical presales, or security engineering for AI-enabled systems.
Your team
Technology & Engineering
Benefits
Family-friendly leave including maternity, adoption, shared parental leave and paid leave for sickness, pregnancy loss, fertility treatment, menopause and bereavement.
- Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
- Mental health support including CareFirst, Unmind, Aviva consultations and in-house first aiders.
- Eight complimentary backup care sessions for emergency childcare or elder care.
- Five weeks of annual leave with the option to buy or sell holiday days.
- Minimum 40 hours of training annually and a Business Coach from Day One.
- Online GP services.
- Perks including Wellhub (Gympass), travel insurance, Tastecard, season ticket loans, Cycle to Work and dental insurance.
Apply
About Capco
A consulting firm delivering security engineering and secure digital transformation for financial institutions and other major clients.
Key facts
- Consulting
- Collaborative, entrepreneurial consulting culture with continuous learning, training and certification opportunities.
- Helps shape secure digital transformation across financial services and energy.
What they value
- Belief that being yourself is your greatest strength, with a #BeYourselfAtWork culture encouraging individuality and collaboration.