Senior Security Engineer

About the role

Senior Security Engineer

Location: London (Hybrid) | Practice Area: Technology & Engineering | Type: Permanent

Lead advanced security engineering initiatives that safeguard the future of digital finance

The Role

As a Senior Security Engineer at Capco, you’ll lead the design and implementation of secure systems and processes across cloud and on-premise platforms. You’ll collaborate closely with engineering and client teams to embed security-by-design principles throughout the SDLC, integrate automated security tooling, and ensure resilience against evolving cyber threats. You’ll also use approved AI tools and AI-enabled workflows where appropriate to improve the speed, quality and effectiveness of security engineering, while maintaining human judgement, responsible AI guardrails and appropriate review and escalation.

What You’ll Do

-

Design and implement enterprise-wide security controls and frameworks, using approved AI and automation where appropriate to improve security outcomes

-

Embed security controls into CI/CD pipelines (SAST, SCA, DAST, container scanning) and enable secure SDLC practices

-

Collaborate across teams to champion secure development practices and responsible use of AI-enabled security workflows

-

Lead vulnerability assessments, code reviews and security audits across infrastructure and applications, maintaining appropriate human review, audit trails and escalation pathways

-

Develop and evolve security standards, engineering patterns and data protection strategies

What We’re Looking For

-

Strong hands-on experience with Palo Alto, Microsoft or similar security ecosystems

-

Deep understanding of cloud security for AWS, Azure or GCP platforms

-

Proven expertise in secure coding, endpoint protection, SIEM and IAM

-

Familiarity with frameworks and standards such as ISO 27001, NIST and OWASP, alongside an understanding of responsible AI, security guardrails and human-in-the-loop controls

-

Proficiency in Python, Bash, PowerShell or Go for security automation and tool development, with experience implementing Zero Trust Architecture solutions

Bonus Points For

-

Certifications such as CISSP, CSSLP or cloud-specific credentials

-

Experience building or integrating AI-enabled security tooling, automation and responsible AI guardrails

-

Experience mentoring engineering teams and driving security awareness

-

Advanced knowledge of DevSecOps tools and practices

-

Exposure to financial services security and regulatory requirements, with a passion for staying current with cyber trends and emerging threat landscapes