Security Engineer

“Capco, a Wipro company, is a global technology and management consulting firm. Awarded with Consultancy of the year in the  British Bank Award and has been ranked Top 100 Best Companies for Women in India 2022 by Avtar & Seramount. With our presence across 32 cities across globe, we support 100+ clients across banking, financial and Energy sectors. We are recognized for our deep transformation execution and delivery. 

Innovative thinking, delivery excellence and thought leadership to help our clients transform their business. Together with our clients and industry partners, we deliver disruptive work that is changing energy and financial services.

Capco has a tolerant, open culture that values diversity, inclusivity, and creativity.

With no forced hierarchy at Capco, everyone has the opportunity to grow as we grow, taking their career into their own hands.

We believe that diversity of people and perspective gives us a competitive advantage.

You will play a pivotal role in strengthening the security of complex defence programmes, building the foundations that enable teams to deliver secure, resilient applications. You will bring together threat modelling, security architecture, and hands-on engineering, working closely with delivery teams to turn security requirements into practical solutions and influence key design decisions.

You will help shape reusable security capabilities and guide teams across the application lifecycle, while contributing your expertise to the wider security practice and helping raise security standards across defence environments.

• →Build and improve shared security foundations, tools, and patterns that teams can use across applications and services.
• →Help product and engineering teams design, build, and operate secure applications.
• →Lead threat-modelling sessions to identify threats, attack paths, and mitigations early in the development process.
• →Review application and system designs, then give teams clear, actionable security guidance.
• →Develop secure-by-default patterns for identity and access, data protection, secrets management, logging, and network controls.
• →Help integrate security checks into development workflows and support teams in resolving findings.
• →Create practical security guidance and reusable components that make secure development easier.
• →Work with engineering and programme teams to understand defence requirements and apply them to system design.
• →Mentor engineers and promote consistent application security practices.

• Significant experience in security engineering, application security, or a related technical role.
• Hands-on experience threat modelling applications or systems and helping teams act on the results.
• Strong understanding of secure software design, common application vulnerabilities, identity, encryption, and APIs.
• Experience building security tooling, reusable components, developer guidance, or platform capabilities.
• Ability to work collaboratively with developers and explain security decisions in practical terms.

• Strong network security knowledge, including network architecture, segmentation, firewalls, and secure communications.