Senior / Lead Security Engineer
Capco
- Edinburgh
- Permanent
- Full-time
- Experts across the Capital Markets, Insurance, Payments, Retail Banking and Wealth & Asset Management domains.
- Deep knowledge in various financial services offerings including Finance, Risk and Compliance, Financial Crime, Core Banking etc.
- Committed to growing our business and hiring the best talent to help us get there.
- Focused on maintaining our nimble, agile and entrepreneurial culture.
- Craft and implement an advanced security engineering strategy to bolster our infrastructure and networks.
- Mentor and guide the security engineering team, fostering a culture of continuous learning and innovation.
- Collaborate with cross-functional teams to inculcate security-by-design principles.
- Design and optimise endpoint protection solutions, ensuring robustness against evolving threats.
- Provide leadership in device management, secure configuration, and hardening practices.
- Secure our Cloud architectures, emphasising proactive defence mechanisms and robust access controls.
- Monitor cloud configurations, ensuring alignment with best practices and compliance requirements.
- Implement a strategy for data protection across its lifecycle.
- Provide leadership in encryption, tokenisation, and masking strategies and implement a strategy for data protection across its lifecycle.
- Spearhead the integration of security within the SDLC, promoting secure coding practices and integrating security tools within CI/CD pipelines.
- Oversee designs, vulnerability assessments and code reviews, ensuring applications are free of critical security flaws.
- Guide the engineering teams in embracing security as an integral part of the development lifecycle.
- Promote secure coding practices and integrate security tools within CI/CD pipelines.
- Conduct regular network security assessments and audits to identify and mitigate vulnerabilities.
- Monitor security access and implement firewall technologies.
- Monitor the cybersecurity landscape for emerging threats and innovative defence strategies.
- Test and incorporate new security tools and methodologies that align with our tech stack and security objectives.
- Extensive experience in endpoint security solutions and best practices.
- Deep expertise in Cloud Security.
- Proficient understanding of data security principles and mechanisms.
- Strong background in application security and secure software development.
- Familiarity with major security standards and frameworks.
- Experience with programming languages (e.g., Python, Go, Java) will be a strong advantage.
- Excellent communication skills, both written and verbal.
- Bachelor's or master's degree in computer science, Information Security, or a related field.
- Relevant certifications such as CSSLP, CISSP, or cloud-specific certifications.
- An appetite to contribute to the wider Capco business outside of project assignments. This can be achieved through various means including thought leadership activities, supporting RFP's and the coaching/mentoring of more junior engineering team members
- Working alongside clients to interpret requirements and define industry-leading solutions.
- Designing and developing robust, well tested data pipelines.
- Demonstrating and helping clients adhere to best practices in engineering and SDLC.
- Building event-driven, loosely coupled distributed applications.
- Developing both on-premise and cloud-based solutions.
- Supporting internal Capco capabilities by sharing insight, experience and credentials.
- A work culture focused on innovation and building lasting value for our clients and employees
- Ongoing learning opportunities to help you acquire new skills or deepen existing expertise
- A flat, non-hierarchical structure that will enable you to work with senior partners and directly with clients
- A diverse, inclusive, meritocratic culture
- Enhanced and competitive family friendly benefits, including maternity / adoption / shared parental leave and paid leave for sickness, pregnancy loss, fertility treatment, menopause, and bereavement