Principal Security Engineer

Capco; London; On-site; GBP 80,000 - 120,000; Full time

Job summary

An established industry player in financial consulting is seeking a Principal Security Engineer to spearhead security initiatives and implement robust security strategies. In this pivotal role, you will collaborate with engineering teams to embed security best practices and ensure compliance across diverse environments. Your expertise will drive the evolution of security in financial services, working with cutting-edge tools and technologies. This innovative firm fosters a culture of diversity and inclusion, providing an engaging work environment where your contributions will significantly impact the industry. If you are passionate about security trends and innovation, this opportunity is perfect for you.

Benefits

Innovative work culture

Learning opportunities

Flat structure

Diverse and inclusive culture

Family-friendly benefits

Parental leave

Health support

Qualifications

• Experience with security strategies for infrastructure and cloud environments.
• Knowledge of security tools and secure development practices.

Responsibilities

• Develop and implement security strategies for infrastructure and cloud.
• Lead security initiatives across the SDLC and conduct vulnerability assessments.

Skills

Application Security

CheckmarxOne

Prisma Cloud

SAST

DAST

SCA

Container Scanning

AWS

Azure

GCP

Data Security Principles

ISO 27001

NIST

OWASP

Python

Go

Java

Communication Skills

Education

Bachelor’s in Computer Science

Master’s in Security

Tools

CheckmarxOne

Prisma Cloud

Job description

Join to apply for the Principal Security Engineer role at Capco.

Capco is a global technology and business consultancy focused on the financial services sector. We are committed to diversity and inclusion, fostering an environment where everyone can be themselves and contribute uniquely.

Why Join Capco?

Work on engaging projects with leading banks, transforming the financial industry, supported by experts in Capital Markets, Insurance, Payments, Retail Banking, and Wealth & Asset Management.

The Role

Support the evolution of Financial Services industry by designing and implementing security strategies, leading security initiatives, and embedding security best practices within engineering teams.

Responsibilities

• Develop and implement security strategies for infrastructure, networks, and cloud environments.
• Lead security initiatives across the SDLC, including SAST, DAST, SCA, and container scanning using tools like CheckmarxOne, Prisma Cloud.
• Collaborate with teams to embed security-by-design principles.
• Design endpoint and cloud security solutions.
• Ensure cloud configurations meet compliance standards.
• Develop data protection strategies.
• Integrate security tools into CI/CD pipelines.
• Conduct vulnerability assessments and security audits.
• Guide teams in secure development practices.
• Test and monitor security tools for emerging threats.

Skills & Expertise

• Knowledge of application security and tools like CheckmarxOne, Prisma Cloud.
• Experience with SAST, DAST, SCA, container scanning, and integrating these into pipelines.
• Expertise in endpoint, cloud security, and network protection.
• Proficiency with AWS, Azure, or GCP.
• Understanding of data security principles.
• Familiarity with standards like ISO 27001, NIST, OWASP.
• Programming skills in Python, Go, or Java.
• Strong communication skills.

Preferred Qualifications

• Bachelor’s or Master’s in Computer Science, Security, or related.
• Certifications such as CISSP, CSSLP, or cloud security certs.
• Experience mentoring engineers and thought leadership.

Additional Qualities

• Contribution to RFPs, thought leadership, mentoring.
• Passion for security trends and innovation.

A Day in the Life

• Collaborate with clients on secure solutions.
• Design security frameworks for on-premise and cloud.
• Support automation and security integration in engineering teams.
• Conduct security assessments and recommend improvements.
• Build internal security capabilities.

What We Offer

• Innovative work culture with learning opportunities.
• Flat structure enabling collaboration with senior leaders.
• Diverse, inclusive, meritocratic culture.
• Family-friendly benefits including parental leave and health support.

We advise verifying identities to avoid scams. All official communication will be via Capco recruiters.