C
Senior Security Engineer
Contract type
Ongoing
Work mode
Hybrid · London, United Kingdom
Experience
Senior · Not stated
Level inferred from job title
Job description
A Senior Security Engineer at Capco leads hands-on security engineering delivery for clients across financial services and other complex environments, covering application, cloud and DevSecOps security.
At a glance
- Employment
- Full-time · Employee (employment agreement)
- Work mode
- Hybrid · London, United Kingdom
- Languages
- English
What you'll do
- Lead design, implementation and technical assurance of secure solutions across applications, cloud platforms and delivery pipelines while staying hands-on.
- Work directly with clients, lead technical workshops and shape security designs, delivery plans and proposals.
- Embed security-by-design across applications, APIs, cloud workloads and the secure SDLC using threat modelling and scanning tools.
- Build and integrate scalable security automation using scripting, APIs, Infrastructure as Code and policy as code.
- Lead technical workstreams, assure engineering quality, mentor engineers and develop reusable standards and patterns.
- Use approved AI-enabled tools and automation to improve security engineering efficiency with human oversight.
What we're looking for
- Deep implementation expertise in Application & Product Security, Cloud & Platform Security or DevSecOps, with working knowledge of the others.
- Practical experience securing applications, APIs, cloud workloads or pipelines, with threat modelling, vulnerability management and secure SDLC knowledge.
- Experience with at least one major cloud platform (Azure, AWS or GCP) and cloud-native security principles including IaC, containers and workload identities.
- Strong security automation capability with scripting, APIs, CI/CD tooling and IaC or policy as code.
- Broad awareness of network and infrastructure security, IAM, monitoring and data-protection controls, able to explain trade-offs to clients.
- Strong understanding of security standards such as ISO 27001, NIST and OWASP and ability to translate them into engineering controls.
Nice to have
- Experience in financial services, energy or other regulated sectors, and certifications such as CISSP, CSSLP, CCSP or cloud security credentials.
- Depth across multiple engineering domains, software supply-chain or container security, technical presales, or security for AI-enabled systems.
Your team
Technology & Engineering
Benefits
Family-friendly leave including maternity, adoption, shared parental leave and paid leave for sickness, pregnancy loss, fertility treatment, menopause and bereavement.
- Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
- Mental health support including CareFirst, Unmind, Aviva consultations and in-house first aiders.
- Eight complimentary backup care sessions for emergency childcare or elder care.
- Five weeks of annual leave with the option to buy or sell holiday days.
- Minimum 40 hours of training annually and a Business Coach from Day One.
- Online GP services.
- Perks including Wellhub (Gympass), travel insurance, Tastecard, season ticket loans, Cycle to Work and dental insurance.
Apply
About Capco
Capco is a consulting firm delivering secure digital transformation for financial institutions and other major clients.
Key facts
- Consulting
- Collaborative, entrepreneurial consulting culture with continuous learning, training and certification opportunities.
- Delivers security engineering solutions for leading financial institutions and other major clients.
What they value
- Being yourself is your greatest strength, with a #BeYourselfAtWork culture encouraging individuality and collaboration.