Principle Security Engineer

The Senior Security Engineer is responsible for designing, implementing and continuously improving enterprise security capabilities across cloud, infrastructure, software engineering and end-user environments.

Working closely with Security Operations, Security Governance, Engineering, Infrastructure and Technology teams, the role will develop and maintain the security platforms, integrations, automation and technical guardrails that underpin the enterprise security strategy.

The successful candidate will combine deep technical expertise with strong stakeholder engagement skills and a passion for simplifying security through engineering.

Product & Technology plays a pivotal role in aligning the organization with its strategic objectives and enhancing shareholder value. Product & Technology is responsible for establishing unified standards and governance practices throughout the company. Additionally, we oversee the development and maintenance of core applications essential for the seamless operation of various functions across the organization. We are committed to driving and executing future roadmaps that are in line with the overall strategic direction of RWS. 

With a global reach, Product & Technology provides support services to over 7500 end users worldwide. We take pride in managing the information security operation and safeguarding all our assets. Our core functions encompass Enterprise & Technical Architecture, Network & Voice, Infrastructure, Service Delivery, Service Operations, Data & Analytics, Security & Quality Compliance, Transformation, Application Development, Enterprise Platforms, With a dedicated team of over 500 staff, Product & Technology ensures a strong presence across all regions, enabling efficient and effective support to our global operations.

• Implement and manage strategic security platforms across the enterprise.
• Lead onboarding and integration of security tools into a centralised security ecosystem.
• Develop standardised security services and reusable capabilities.
• Reduce complexity through platform rationalisation and standardisation.
• Improve visibility across cloud, endpoint, identity and application environments.

• Design and implement automated security controls and workflows.
• Integrate security tools through APIs and orchestration platforms.
• Automate vulnerability management, compliance validation and security monitoring activities.
• Eliminate manual processes wherever practical.
• Develop Infrastructure as Code and policy-as-code capabilities.

• Build and maintain secure cloud security capabilities across Azure, AWS and SaaS platforms.
• Implement CSPM, workload protection and cloud-native security controls.
• Develop secure landing zones and security baselines.
• Create reusable cloud security patterns and reference architectures.
• Support Zero Trust and identity-driven security initiatives.

• Embed security controls into development pipelines.
• Integrate SAST, DAST, SCA, secrets scanning and CI/CD security tooling.
• Create secure development guardrails that support engineering productivity.
• Develop reusable security patterns for development teams.
• Enable secure AI and cloud-native application delivery.

• Assist with implementation of modern identity security controls.
• Support Privileged Access Management and access governance initiatives.
• Deploy and maintain DLP, data classification and information protection technologies.
• Integrate identity, endpoint and data protection controls into a unified security architecture.

• Partner closely with development and infrastructure teams.
• Provide practical security guidance and technical leadership.
• Promote security-by-design and security-by-default principles.
• Help teams adopt standardised security tooling and practices.
• Act as a security champion for engineering transformation activities.

• Monitor effectiveness of security controls.
• Identify opportunities for increased automation and simplification.
• Contribute to security architecture and platform roadmaps.
• Support investigations, incident response activities and root cause analysis.
• Stay current with emerging threats, technologies and engineering practices.

Get the 3Ps right – Partner, Pioneer, Progress – and we´ll Deliver together as RWS.

Recruitment Agencies: RWS Holdings PLC does not accept agency resumes.  Please do not forward any unsolicited resumes to any RWS employees.  Any unsolicited resume received will be treated as the property of RWS and Terms & Conditions associated with the use of such resume will be considered null and void.

#LI-IV1 #LI-Hybrid

• 5+ years in Security Engineering, Platform Engineering or DevSecOps roles.
• Experience implementing enterprise security technologies.
• Experience designing secure cloud environments.
• Experience integrating security capabilities into engineering workflows.
• Strong understanding of automation and platform engineering principles.
• Experience working within complex, global technology environments.

• Experience supporting security transformation programmes.
• Experience with Microsoft Defender, Sentinel, GitHub Advanced Security, Wiz or equivalent platforms.
• Experience implementing DLP and data classification solutions.
• Experience supporting AI security initiatives.
• Experience working within ISO27001, SOC2 or regulated environments.

• Security architecture and design
• Security control implementation
• Vulnerability management
• Threat modelling
• Security monitoring and detection engineering
• Security platform integration

• Azure security services
• AWS security services
• CSPM platforms
• Cloud identity and access management
• Container and Kubernetes security
• Infrastructure as Code

• GitHub Actions
• CI/CD pipelines
• SAST, DAST and SCA tooling
• Secret scanning
• Dependency management
• Secure SDLC practices

• Python, PowerShell or similar scripting languages
• REST APIs
• Security orchestration and automation
• Infrastructure as Code (Terraform, CloudFormation or equivalent)
• Policy as Code
• Platform integrations

• Microsoft Entra ID
• Conditional Access
• Privileged Access Management
• Endpoint protection platforms
• Zero Trust principles

As RWS continues to modernise its technology landscape, security must evolve from a collection of local processes and point solutions into a consistent, scalable and automated capability embedded across the organisation.

The Senior Security Engineer plays a critical role in this transformation by designing, building and operating the technical foundations that enable security at scale. This includes centralising security tooling, implementing automated controls, creating reusable engineering patterns and embedding security directly into cloud platforms, engineering workflows and business services.

The role is instrumental in helping the organisation move from manual, people-driven security processes towards automated, policy-driven controls that improve visibility, reduce risk and enable teams to deliver securely at speed.