Principal Security Engineer

<h1>Principal Security Engineer</h1> <p>Location: London (Hybrid) | <em><strong>Practice Area</strong></em>: Technology &amp; Engineering | Type: Permanent</p> <p><strong>Lead advanced security engineering initiatives that safeguard the future of digital finance</strong></p> <p><strong>The Role</strong></p> <p>As a Principal Security Engineer at Capco, you’ll lead the design and implementation of secure systems and processes across cloud and on-premise platforms. You’ll collaborate closely with engineering and client teams to embed security-by-design principles throughout the SDLC, integrate automated security tooling, and ensure resilience against evolving cyber threats. You’ll also use approved AI tools and AI-enabled workflows where appropriate to improve the speed, quality and effectiveness of security engineering, while maintaining human judgement, responsible AI guardrails and appropriate review and escalation.</p> <p><strong>What You’ll Do</strong></p> <ul> <li> <p>Design and implement enterprise-wide security controls and frameworks, using approved AI and automation where appropriate to improve security outcomes</p> </li> <li> <p>Embed security controls into CI/CD pipelines (SAST, SCA, DAST, container scanning) and enable secure SDLC practices</p> </li> <li> <p>Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows</p> </li> <li> <p>Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways</p> </li> <li> <p>Develop and evolve security standards, engineering patterns and data protection strategies</p> </li> </ul> <p><strong>What We’re Looking For</strong></p> <ul> <li> <p>Strong hands-on experience with Palo Alto, Microsoft or similar security ecosystems</p> </li> <li> <p>Deep understanding of cloud security for AWS, Azure or GCP platforms</p> </li> <li> <p>Proven expertise in secure coding, endpoint protection, SIEM and IAM</p> </li> <li> <p>Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls</p> </li> <li> <p>Proficiency in Python, Bash, PowerShell or Go for security automation and tool development, with experience implementing Zero Trust Architecture solutions</p> </li> </ul> <p><strong>Bonus Points For</strong></p> <ul> <li> <p>Certifications such as CISSP, CSSLP or cloud-spec