Principal Security Engineer

The Senior Security Engineer is responsible for designing, implementing and continuously improving enterprise security capabilities across cloud, infrastructure, software engineering and end-user environments.

Working closely with Security Operations, Security Governance, Engineering, Infrastructure and Technology teams, the role will develop and maintain the security platforms, integrations, automation and technical guardrails that underpin the enterprise security strategy.

The successful candidate will combine deep technical expertise with strong stakeholder engagement skills and a passion for simplifying security through engineering.

About Product & Technology

Product & Technology plays a pivotal role in aligning the organization with its strategic objectives and enhancing shareholder value. Product & Technology is responsible for establishing unified standards and governance practices throughout the company. Additionally, we oversee the development and maintenance of core applications essential for the seamless operation of various functions across the organization. We are committed to driving and executing future roadmaps that are in line with the overall strategic direction of RWS. 

With a global reach, Product & Technology provides support services to over 7500 end users worldwide. We take pride in managing the information security operation and safeguarding all our assets. Our core functions encompass Enterprise & Technical Architecture, Network & Voice, Infrastructure, Service Delivery, Service Operations, Data & Analytics, Security & Quality Compliance, Transformation, Application Development, Enterprise Platforms, With a dedicated team of over 500 staff, Product & Technology ensures a strong presence across all regions, enabling efficient and effective support to our global operations.

Key Responsibilities

Security Platform Engineering

• Implement and manage strategic security platforms across the enterprise.
• Lead onboarding and integration of security tools into a centralised security ecosystem.
• Develop standardised security services and reusable capabilities.
• Reduce complexity through platform rationalisation and standardisation.
• Improve visibility across cloud, endpoint, identity and application environments.

Security Automation

• Design and implement automated security controls and workflows.
• Integrate security tools through APIs and orchestration platforms.
• Automate vulnerability management, compliance validation and security monitoring activities.
• Eliminate manual processes wherever practical.
• Develop Infrastructure as Code and policy-as-code capabilities.

Cloud Security Engineering

• Build and maintain secure cloud security capabilities across Azure, AWS and SaaS platforms.
• Implement CSPM, workload protection and cloud-native security controls.
• Develop secure landing zones and security baselines.
• Create reusable cloud security patterns and reference architectures.
• Support Zero Trust and identity-driven security initiatives.

DevSecOps & Secure Software Delivery

• Embed security controls into development pipelines.
• Integrate SAST, DAST, SCA, secrets scanning and CI/CD security tooling.
• Create secure development guardrails that support engineering productivity.
• Develop reusable security patterns for development teams.
• Enable secure AI and cloud-native application delivery.

Identity & Data Protection

• Assist with implementation of modern identity security controls.
• Support Privileged Access Management and access governance initiatives.
• Deploy and maintain DLP, data classification and information protection technologies.
• Integrate identity, endpoint and data protection controls into a unified security architecture.

Engineering Enablement

• Partner closely with development and infrastructure teams.
• Provide practical security guidance and technical leadership.
• Promote security-by-design and security-by-default principles.
• Help teams adopt standardised security tooling and practices.
• Act as a security champion for engineering transformation activities.

Continuous Improvement

• Monitor effectiveness of security controls.
• Identify opportunities for increased automation and simplification.
• Contribute to security architecture and platform roadmaps.
• Support investigations, incident response activities and root cause analysis.
• Stay current with emerging threats, technologies and engineering practices.

Skills & Experience

Essential

• 5+ years in Security Engineering, Platform Engineering or DevSecOps roles.
• Experience implementing enterprise security technologies.
• Experience designing secure cloud environments.
• Experience integrating security capabilities into engineering workflows.
• Strong understanding of automation and platform engineering principles.
• Experience working within complex, global technology environments.

Desirable

• Experience supporting security transformation programmes.
• Experience with Microsoft Defender, Sentinel, GitHub Advanced Security, Wiz or equivalent platforms.
• Experience implementing DLP and data classification solutions.
• Experience supporting AI security initiatives.
• Experience working within ISO27001, SOC2 or regulated environments.

Core Technical Skills

Security Engineering

• Security architecture and design
• Security control implementation
• Vulnerability management
• Threat modelling
• Security monitoring and detection engineering
• Security platform integration

Cloud Security

• Azure security services
• AWS security services
• CSPM platforms
• Cloud identity and access management
• Container and Kubernetes security
• Infrastructure as Code

DevSecOps

• GitHub Actions
• CI/CD pipelines
• SAST, DAST and SCA tooling
• Secret scanning
• Dependency management
• Secure SDLC practices

Automation & Engineering

• Python, PowerShell or similar scripting languages
• REST APIs
• Security orchestration and automation
• Infrastructure as Code (Terraform, CloudFormation or equivalent)
• Policy as Code
• Platform integrations

Identity & Endpoint Security

• Microsoft Entra ID
• Conditional Access
• Privileged Access Management
• Endpoint protection platforms
• Zero Trust principles

Why This Role Matters

As RWS continues to modernise its technology landscape, security must evolve from a collection of local processes and point solutions into a consistent, scalable and automated capability embedded across the organisation.

The Senior Security Engineer plays a critical role in this transformation by designing, building and operating the technical foundations that enable security at scale. This includes centralising security tooling, implementing automated controls, creating reusable engineering patterns and embedding security directly into cloud platforms, engineering workflows and business services.

The role is instrumental in helping the organisation move from manual, people-driven security processes towards automated, policy-driven controls that improve visibility, reduce risk and enable teams to deliver securely at speed.

Our purpose is to unlock global understanding. This means our work fundamentally recognizes the value of every language and culture. So, we celebrate difference, we are inclusive and believe that diversity makes us strong. We want every employee to grow as an individual and excel in their career. 

In return, we expect all our people to live by the values that unite us: to partner, putting clients fist and winning together, to pioneer, innovating fearlessly and leading with vision and courage, to progress, aiming high and growing through actions and to deliver, owning the outcome and building trust with our colleagues and clients.

RWS embraces DEI and promotes equal opportunity, we are an Equal Opportunity Employer and prohibit discrimination and harassment of any kind. RWS is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at RWS are based on business needs, job requirements and individual qualifications, without regard to race, religion, nationality, ethnicity, sex, age, disability, or sexual orientation. RWS will not tolerate discrimination based on any of these characteristics. 

RWS Values 

Get the 3Ps right – Partner, Pioneer, Progress – and we´ll Deliver together as RWS.

Recruitment Agencies: RWS Holdings PLC does not accept agency resumes.  Please do not forward any unsolicited resumes to any RWS employees.  Any unsolicited resume received will be treated as the property of RWS and Terms & Conditions associated with the use of such resume will be considered null and void.

#LI-IV1 #LI-Hybrid