4 hours ago
Bengaluru, IndiaStaff+
Responsibilities
- Build and improve shared security foundations, tools, patterns, and reusable components for applications and services.
- Partner with product, engineering, and programme teams to design, build, and operate secure applications.
- Lead threat-modelling sessions and identify threats, attack paths, and mitigations.
- Review application and system designs and provide actionable security guidance.
- Develop secure-by-default patterns for identity and access, data protection, secrets management, logging, and network controls.
- Integrate security checks into development workflows and support teams in resolving findings.
- Apply defence requirements to system design and mentor engineers on application security practices.
Requirements
- Significant experience in security engineering, application security, or a related technical role.
- Hands-on experience threat modelling applications or systems and helping teams act on the results.
- Strong understanding of secure software design, common application vulnerabilities, identity, encryption, and APIs.
- Experience building security tooling, reusable components, developer guidance, or platform capabilities.
- Ability to collaborate with developers and explain security decisions practically.
- Preferred experience with network architecture, segmentation, firewalls, and secure communications.
Benefits
- Work on projects for major banking, insurance, payment services, and energy-sector clients.
- Inclusive and collaborative culture with opportunities for career growth and advancement.
Categories
About Capco
Capco is a global technology and management consultancy focused on financial services, helping banks, capital markets, insurance, and wealth firms with digital transformation, risk and compliance, and data/AI-enabled modernization. Founded in 1998 and headquartered in London, it operates as a Wipro company. Its business model centers on project-based consulting, managed services, and solution delivery across strategy, engineering, and platforms for regulated institutions.