Principal Security Engineer at Capco in UK - London

Job description

• Lead advanced security engineering initiatives that safeguard the future of digital finance
• As a Principal Security Engineer at Capco, you’ll lead the design and implementation of secure systems and processes across cloud and on-premise platforms. You’ll collaborate closely with engineering and client teams to embed security-by-design principles throughout the SDLC, integrate automated security tooling, and ensure resilience against evolving cyber threats. You’ll also use approved AI tools and AI-enabled workflows where appropriate to improve the speed, quality and effectiveness of security engineering, while maintaining human judgement, responsible AI guardrails and appropriate review and escalation.

Responsibilities

• Design and implement enterprise-wide security controls and frameworks, using approved AI and automation where appropriate to improve security outcomes
• Embed security controls into CI/CD pipelines (SAST, SCA, DAST, container scanning) and enable secure SDLC practices
• Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows
• Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways
• Develop and evolve security standards, engineering patterns and data protection strategies

Requirements

• Strong hands-on experience with Palo Alto, Microsoft or similar security ecosystems
• Deep understanding of cloud security for AWS, Azure or GCP platforms
• Proven expertise in secure coding, endpoint protection, SIEM and IAM
• Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls
• Proficiency in Python, Bash, PowerShell or Go for security automation and tool development, with experience implementing Zero Trust Architecture solutions
• Certifications such as CISSP, CSSLP or cloud-specific credentials
• Experience building or integrating AI-enabled security tooling, automation and responsible AI guardrails
• Experience mentoring engineering teams and driving security awareness
• Advanced knowledge of DevSecOps tools and practices
• Exposure to financial services security and regulatory requirements, with a passion for staying current with cyber trends and emerging threat landscapes

Skills

Required

• Palo Alto
• Microsoft security ecosystems
• AWS
• Azure
• GCP
• Secure coding
• Endpoint protection
• SIEM
• IAM
• ISO 27001
• NIST
• OWASP

Preferred

• CISSP
• CSSLP
• Cloud-specific credentials
• AI-enabled security tooling
• Automation
• Responsible AI guardrails
• Mentoring
• DevSecOps tools and practices

Benefits

• We offer a competitive, people-first benefits package designed to support every aspect of your life:
• Core Benefits: Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.
• Mental Health: Easy access to CareFirst, Unmind, Aviva consultations, and in-house first aiders.
• Family-Friendly: Maternity, adoption, shared parental leave, plus paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement.
• Family Care: Eight complimentary backup care sessions for emergency childcare or elder care.
• Holiday Flexibility: Five weeks of annual leave with the option to buy or sell holiday days based on your needs.
• Continuous Learning: Your growth, your way—minimum 40 hours of training annually through workshops, certifications, and e-learning. You'll also be assigned a Business Coach from Day One to support your professional development.
• Healthcare Access: Convenient online GP services.
• Extra Perks: Wellhub (Gympass), travel insurance, Tastecard, season ticket loans, Cycle to Work, and dental insurance.