Principal Security Engineer

<h1>Principal Security Engineer</h1> <p>Location: London (Hybrid) | <em><strong>Practice Area</strong></em>: Technology & Engineering | Type: Permanent</p> <p><strong>Lead advanced security engineering initiatives that safeguard the future of digital finance</strong></p> <p><strong>The Role</strong></p> <p>As a Principal Security Engineer at Capco, you’ll lead the design and implementation of secure systems and processes across cloud and on-premise platforms. You’ll collaborate closely with engineering and client teams to embed security-by-design principles throughout the SDLC, integrate automated security tooling, and ensure resilience against evolving cyber threats. You’ll also use approved AI tools and AI-enabled workflows where appropriate to improve the speed, quality and effectiveness of security engineering, while maintaining human judgement, responsible AI guardrails and appropriate review and escalation.</p> <p><strong>What You’ll Do</strong></p> <ul> <li> <p>Design and implement enterprise-wide security controls and frameworks, using approved AI and automation where appropriate to improve security outcomes</p> </li> <li> <p>Embed security controls into CI/CD pipelines (SAST, SCA, DAST, container scanning) and enable secure SDLC practices</p> </li> <li> <p>Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows</p> </li> <li> <p>Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways</p> </li> <li> <p>Develop and evolve security standards, engineering patterns and data protection strategies</p> </li> </ul>