Principal Security Engineer

capcofull-time

AI Summary: Principal-level security engineering role focused on designing and implementing security architecture, likely involving threat modeling, security strategy, compliance frameworks, and mentoring security teams rather than hands-on coding.

Career-change fit:6/10

IT & Infrastructurehybrid

Apply for This Position

Originally posted onarbeitnow on 11/9/2026

Full Description

Principal Security Engineer  <span data-ccp-parastyle="Job metadata" data-ccp-parastyle-defn="{"ObjectId":"344120fe-537f-5c41-9dd4-16cebadb2931|1","ClassId":1073872969,"Properties":[469777841,"Aptos",469777844,"Aptos",469769226,"Aptos",335551500,"7760736",268442635,"18",335559740,"257",201341983,"0",335559739,"160",201342446,"1",201342447,"5",201342448,"3",201342449,"1",469777842,"",469777843,"ＭＳ明朝",201341986,"1",469775450,"Job metadata",201340122,"2",134233614,"true",469778129,"Jobmetadata",335572020,"1",469778324,"Normal"]}">London (Hybrid) | Technology & Engineering  | Permanent  The Role As a Principal Security Engineer at Capco, you'll lead hands-on security engineering delivery for clients across financial services and other complex environments. Depending on the engagement, you'll lead a technical workstream or operate independently as a Principal specialist. Your focus will span Application & Product Security, Cloud & Platform Security and DevSecOps, underpinned by strong security automation. You'll combine specialist depth with cross-domain judgement, client engagement and secure-by-design engineering.  What You'll Do  <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-ccp-parastyle="Job bullet" data-ccp-parastyle-defn="{"ObjectId":"163687dc-726f-5d1b-8887-6b824e106871|1","ClassId":1073872969,"Properties":[469777841,"Aptos",469777844,"Aptos",469769226,"Aptos",335551500,"3615780",268442635,"19",335559740,"251",201341983,"0",335559739,"60",201342446,"1",201342447,"5",201342448,"3",201342449,"1",469777842,"",469777843,"ＭＳ明朝",201341986,"1",469775450,"Job bullet",201340122,"2",134233614,"true",469778129,"Jobbullet",335572020,"1",335559685,"346",335559991,"202",469778324,"Normal"]}">Lead the design, implementation and technical assurance of secure solutions across applications, cloud platforms and delivery pipelines; remain hands-on with complex engineering and integration challenges. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="2" data-aria-level="1">Work directly with clients to understand requirements, lead technical workshops and shape practical security designs, delivery plans and technical proposals. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="3" data-aria-level="1">Embed security-by-design across applications, APIs, cloud workloads and the secure SDLC through threat modelling, CI/CD controls, SAST, SCA, DAST and container scanning. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="4" data-aria-level="1">Build and integrate scalable security automation using scripting, APIs, Infrastructure as Code and policy as code; improve control effectiveness and engineering workflows. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="5" data-aria-level="1">Lead technical workstreams or specialist assignments, assure engineering quality and operational handover, mentor engineers and develop reusable standards and patterns. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="6" data-aria-level="1">Leverage approved AI-enabled tools and automation to enhance security engineering efficiency and effectiveness, ensuring appropriate human oversight, security guardrails and validation. </li> </ul> What We're Looking For  <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="7" data-aria-level="1">Proven hands-on security engineering delivery and technical leadership, including secure design decisions, engineering assurance, client engagement and mentoring. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="8" data-aria-level="1">Deep implementation expertise in one or more of Application & Product Security, Cloud & Platform Security or DevSecOps, with working knowledge of the other areas. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="9" data-aria-level="1">Practical experience securing applications, APIs, cloud workloads or engineering pipelines, supported by sound knowledge of threat modelling, vulnerability management and secure SDLC practices. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="10" data-aria-level="1">Experience with at least one major cloud platform (Azure, AWS or GCP) and cloud-native security principles, including an understanding of IaC, containers and workload identities. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="11" data-aria-level="1">Strong security automation capability with scripting, APIs and CI/CD tooling, plus experience with IaC or policy as code and integrating security tools into engineering workflows. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Broad awareness of network and infrastructure security, IAM, monitoring and data-protection controls; able to collaborate with specialists and explain technical trade-offs to clients. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="13" data-aria-level="1">Strong understanding of security standards and best practices, including ISO 27001, NIST and OWASP, with the ability to translate security requirements into practical engineering controls and solutions. </li> </ul> Bonus Points For  <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="14" data-aria-level="1">Experience in financial services, energy or other regulated sectors; relevant certifications such as CISSP, CSSLP, CCSP or cloud security credentials. </li> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="15" data-aria-level="1">Depth across multiple priority engineering domains; experience in software supply-chain or container security, technical presales, or security engineering for AI-enabled systems. </li> </ul> Why Join Capco  <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="16" data-aria-level="1">Deliver high-impact security engineering solutions for leading financial institutions and other major clients. </li> </ul> <ul> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="17" data-aria-level="1">Work in a collaborative, entrepreneurial consulting culture with continuous learning, training and certification opportunities </li> <li data-leveltext="" data-font="Symbol" data-listid="10" data-list-defn-props="{"335552541":1,"335559685":706,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="18" data-aria-level="1">Help shape secure digital transformation across financial services and energy. </li> </ul> Benefits  We offer a competitive, people-first benefits package designed to support every aspect of your life:  <ul> <li>Core Benefits: Discretionary bonus, competitive pension, health insurance, life insurance and critical illness cover.</li> <li>Mental Health: Easy access to CareFirst, Unmind, Aviva consultations, and in-house first aiders.</li> <li>Family-Friendly: Maternity, adoption, shared parental leave, plus paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement.</li> <li>Family Care: Eight complimentary backup care sessions for emergency childcare or elder care.</li> <li>Holiday Flexibility: Five weeks of annual leave with the option to buy or sell holiday days based on your needs.</li> <li>Continuous Learning: Minimum 40 hours of training annually through workshops, certifications, and e-learning. You'll also be assigned a Business Coach from Day One to support your professional development.</li> <li>Healthcare Access: Convenient online GP services.</li> <li>Extra Perks: Wellhub (Gympass), travel insurance, Tastecard, season ticket loans, Cycle to Work, and dental insurance.</li> </ul> Inclusion at Capco  We're committed to making our recruitment process accessible and straightforward for everyone. If you need any adjustments at any stage, just let us know - we'll be happy to help. #LI-DNI

Find more English Speaking Jobs in United Kingdom on Arbeitnow

Apply for This Position