2 days ago
London, United KingdomSenior
Responsibilities
- Design and implement enterprise-wide security controls and frameworks across cloud and on-premise platforms.
- Embed SAST, SCA, DAST, and container scanning into CI/CD pipelines to support secure SDLC practices.
- Lead vulnerability assessments, code reviews, and security audits across infrastructure and applications.
- Develop security standards, engineering patterns, data protection strategies, and security automation tooling.
- Collaborate with engineering and client teams to promote secure development and responsible AI-enabled security workflows.
- Maintain human review, audit trails, escalation pathways, and resilience against evolving cyber threats.
- Mentor engineering teams and drive security awareness where needed.
Requirements
- Strong hands-on experience with Palo Alto, Microsoft, or similar security ecosystems.
- Deep understanding of cloud security across AWS, Azure, or GCP.
- Proven expertise in secure coding, endpoint protection, SIEM, IAM, and Zero Trust Architecture.
- Familiarity with ISO 27001, NIST, OWASP, responsible AI, security guardrails, and human-in-the-loop controls.
- Proficiency in Python, Bash, PowerShell, or Go for security automation and tool development.
- Preferred qualifications include CISSP, CSSLP, or cloud-specific certifications; experience with AI-enabled security tooling, DevSecOps, financial services security, regulatory requirements, and emerging cyber threats is also valued.
Benefits
- Permanent hybrid role based in London.
- Discretionary bonus, competitive pension, health insurance, life insurance, and critical illness cover.
- Mental health support through CareFirst, Unmind, Aviva consultations, and in-house first aiders.
- Family-friendly leave, paid leave for sickness and various family and personal circumstances, and eight complimentary backup care sessions.
- Five weeks of annual leave with the option to buy or sell holiday days.
- At least 40 hours of training annually, including workshops, certifications, and e-learning, plus a Business Coach from Day One.
- Online GP services, Wellhub, travel insurance, Tastecard, season ticket loans, Cycle to Work, and dental insurance.
About Capco
Capco is a global technology and management consultancy focused on financial services, helping banks, capital markets, insurance, and wealth firms with digital transformation, risk and compliance, and data/AI-enabled modernization. Founded in 1998 and headquartered in London, it operates as a Wipro company. Its business model centers on project-based consulting, managed services, and solution delivery across strategy, engineering, and platforms for regulated institutions.