2 days ago
London, United KingdomStaff+
Responsibilities
- Design and implement enterprise-wide security controls and frameworks across cloud and on-premise platforms.
- Embed SAST, SCA, DAST, and container scanning into CI/CD pipelines and enable secure SDLC practices.
- Lead vulnerability assessments, code reviews, and security audits across infrastructure and applications.
- Develop security standards, engineering patterns, and data protection strategies.
- Use approved AI and automation to improve security outcomes while maintaining human review, audit trails, and escalation pathways.
- Collaborate with engineering and client teams to promote secure development and responsible AI-enabled security workflows.
- Mentor engineering teams and drive security awareness.
Requirements
- Strong hands-on experience with Palo Alto, Microsoft, or similar security ecosystems.
- Deep understanding of cloud security for AWS, Azure, or GCP platforms.
- Expertise in secure coding, endpoint protection, SIEM, IAM, and Zero Trust Architecture solutions.
- Familiarity with ISO 27001, NIST, OWASP, responsible AI, security guardrails, and human-in-the-loop controls.
- Proficiency in Python, Bash, PowerShell, or Go for security automation and tool development.
- Preferred qualifications include CISSP, CSSLP, or cloud-specific certifications; experience with AI-enabled security tooling, DevSecOps, financial services security, regulatory requirements, and mentoring engineering teams.
Benefits
- Permanent London role with a hybrid work arrangement.
- Discretionary bonus, competitive pension, health insurance, life insurance, and critical illness cover.
- Mental-health support, online GP services, dental insurance, travel insurance, and Wellhub/Gympass.
- Family leave and paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement.
- Eight complimentary backup care sessions for emergency childcare or elder care.
- Five weeks of annual leave with the option to buy or sell holiday days.
- At least 40 hours of annual training, access to certifications and e-learning, and a Business Coach from Day One.
- Additional perks include Tastecard, season ticket loans, and Cycle to Work.
About Capco
Capco is a global technology and management consultancy focused on financial services, helping banks, capital markets, insurance, and wealth firms with digital transformation, risk and compliance, and data/AI-enabled modernization. Founded in 1998 and headquartered in London, it operates as a Wipro company. Its business model centers on project-based consulting, managed services, and solution delivery across strategy, engineering, and platforms for regulated institutions.