Security Engineering Lead: Cloud, AI & DevSecOps

capco; Greater London; Hybrid; GBP 120,000 - 150,000; Full time

Benefits offered by this job

Discretionary bonus

Health insurance

Pension

Mental health support

Five weeks holiday

Job summary

Capco is seeking a Principal Security Engineer in London (Hybrid) to lead secure system design and the integration of AI-enabled workflows across cloud and on-prem platforms. You will partner with engineering and client teams to embed security-by-design in the SDLC, while driving vulnerability assessments and security audits.

You will champion secure development, implement CI/CD security controls, and advance data protection strategies.

Qualifications

• Strong hands-on experience with Palo Alto, Microsoft or similar security ecosystems.
• Deep understanding of cloud security for AWS, Azure or GCP platforms.
• Proven expertise in secure coding, endpoint protection, SIEM and IAM.
• Familiarity with ISO 27001, NIST and OWASP; responsible AI guardrails and human-in-the-loop controls.
• Proficiency in Python, Bash, PowerShell or Go for security automation.

Responsibilities

• Design and implement enterprise-wide security controls and frameworks, using approved AI and automation where appropriate to improve security outcomes.
• Embed security controls into CI/CD pipelines (SAST, SCA, DAST, container scanning) and enable secure SDLC practices.
• Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows.
• Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining human review and escalation pathways.
• Develop and evolve security standards, engineering patterns and data protection strategies.

Skills

Palo Alto

Microsoft security

Cloud security

Secure coding

Python scripting

Zero Trust

AI security tooling

Tools

SAST

DAST

SCA

Container scanning

SIEM

IAM

Job description

Capco is seeking a Principal Security Engineer in London (Hybrid) to lead secure system design and the integration of AI-enabled workflows across cloud and on-prem platforms. You will partner with engineering and client teams to embed security-by-design in the SDLC, while driving vulnerability assessments and security audits.

You will champion secure development, implement CI/CD security controls, and advance data protection strategies.