Principal Security Engineer

Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent

As a Principal Security Engineer at Capco, you'll lead the design, implementation, and integration of robust security frameworks across cloud and on-premise environments. You will partner with engineering and client teams to embed security best practices across the SDLC, while driving forward our capabilities in vulnerability management, compliance, and secure architecture.

• →

  Lead enterprise-wide security initiatives using SAST, DAST, SCA, and container scanning tools like CheckmarxOne and Prisma Cloud

• →

  Design and implement secure cloud infrastructures, endpoint protection, and data encryption strategies

• →

  Guide secure-by-design principles and embed security tools into CI/CD pipelines

• →

  Conduct security audits, vulnerability assessments, and threat analysis across systems

• →

  Mentor engineering teams on secure development and build Capco’s internal security knowledge base

• Strong application and cloud security experience across AWS, Azure, or GCP

• Proficiency in SAST, DAST, SCA, and container scanning integration

• Deep knowledge of data protection techniques including encryption and masking

• Familiarity with industry standards such as ISO 27001, NIST, OWASP

• Programming experience in Python, Java, or Go

• Relevant certifications such as CISSP, CSSLP, or cloud-specific security credentials

• Experience mentoring security engineers or contributing to RFPs and thought leadership

• Exposure to secure DevOps (DevSecOps) environments and compliance frameworks

• Experience with Prisma Cloud, CheckmarxOne, or equivalent tools

• Strong stakeholder engagement and communication skills