Principal Security Engineer

This job is with RWS, an inclusive employer and a member of myGwork – the largest global platform for the LGBTQ+ business community. Please do not contact the recruiter directly.

Principal Security Engineer

Job Purpose

The Principal Security Engineer is responsible for designing, implementing and continuously improving enterprise security capabilities across cloud, infrastructure, software engineering and end-user environments.

Working closely with Security Operations, Security Governance, Engineering, Infrastructure and Technology teams, the role will develop and maintain the security platforms, integrations, automation and technical guardrails that underpin the enterprise security strategy.

The successful candidate will combine deep technical expertise with strong stakeholder engagement skills and a passion for simplifying security through engineering.

About Product & Technology

Product & Technology plays a pivotal role in aligning the organization with its strategic objectives and enhancing shareholder value. Product & Technology is responsible for establishing unified standards and governance practices throughout the company. Additionally, we oversee the development and maintenance of core applications essential for the seamless operation of various functions across the organization. We are committed to driving and executing future roadmaps that are in line with the overall strategic direction of RWS.

With a global reach, Product & Technology provides support services to over 7500 end users worldwide. We take pride in managing the information security operation and safeguarding all our assets. Our core functions encompass Enterprise & Technical Architecture, Network & Voice, Infrastructure, Service Delivery, Service Operations, Data & Analytics, Security & Quality Compliance, Transformation, Application Development, Enterprise Platforms, With a dedicated team of over 500 staff, Product & Technology ensures a strong presence across all regions, enabling efficient and effective support to our global operations.

Job Overview

Key Responsibilities

• Implement, integrate, and manage the main enterprise security platforms within one central security ecosystem.
• Design and automate security controls and workflows, and remove manual processes using APIs, orchestration, Infrastructure as Code, and policy as code.
• Build secure cloud capabilities across Azure, AWS and SaaS, including CSPM, workload protection, secure landing zones and reusable reference architectures.
• Build security into CI/CD pipelines with SAST, DAST, SCA and secrets scanning, and create guardrails that help engineers stay productive.
• Support identity, privileged access, Zero Trust, and data protection work, including DLP and data classification.
• Work with engineering and infrastructure teams as a hands-on security advisor who promotes security by design and by default.
• Help shape the security architecture and platform roadmaps, and support incident response and root cause analysis.
• Experience with security transformation programmes, AI security initiatives, or ISO 27001/SOC 2 regulated environments.

Skills & Experience

Essential

• 5+ years in Security Engineering, Platform Engineering or DevSecOps roles.
• Proven experience implementing enterprise security technologies and designing secure cloud environments (Azure and/or AWS).
• Strong DevSecOps experience, including CI/CD, GitHub Actions, application security testing tools and secure SDLC practices.
• Automation skills in Python, PowerShell or similar, with REST APIs and Infrastructure as Code (Terraform, CloudFormation or equivalent).
• Good knowledge of Microsoft Entra ID, Conditional Access, Privileged Access Management, endpoint protection and Zero Trust principles.
• Experience working in complex, global technology environments, with strong stakeholder engagement skills.

Desirable

• Experience with Microsoft Defender, Sentinel, GitHub Advanced Security, Wiz or equivalent platforms.
• Experience with security transformation programmes, AI security initiatives, or ISO 27001/SOC 2 regulated environments.

Core Technical Skills

Security Engineering

• Security architecture and design
• Security control implementation
• Vulnerability management
• Threat modelling
• Security monitoring and detection engineering
• Security platform integration

Cloud Security

• Azure security services
• AWS security services
• CSPM platforms
• Cloud identity and access management
• Container and Kubernetes security
• Infrastructure as Code

DevSecOps

• GitHub Actions
• CI/CD pipelines
• SAST, DAST and SCA tooling
• Secret scanning
• Dependency management
• Secure SDLC practices

Automation & Engineering

• Python, PowerShell or similar scripting languages
• REST APIs
• Security orchestration and automation
• Infrastructure as Code (Terraform, CloudFormation or equivalent)
• Policy as Code
• Platform integrations

Identity & Endpoint Security

• Microsoft Entra ID
• Conditional Access
• Privileged Access Management
• Endpoint protection platforms
• Zero Trust principles

Why This Role Matters

As RWS continues to modernise its technology landscape, security must evolve from a collection of local processes and point solutions into a consistent, scalable and automated capability embedded across the organisation.

The Senior Security Engineer plays a critical role in this transformation by designing, building and operating the technical foundations that enable security at scale. This includes centralising security tooling, implementing automated controls, creating reusable engineering patterns and embedding security directly into cloud platforms, engineering workflows and business services.

The role is instrumental in helping the organisation move from manual, people-driven security processes towards automated, policy-driven controls that improve visibility, reduce risk and enable teams to deliver securely at speed.

Life at RWS

Life at RWS - If you like the idea of working with smart people who are passionate about growing the value of ideas, data and content by making sure organizations are understood, then you'll love life at RWS.

Our purpose is to unlock global understanding. This means our work fundamentally recognizes the value of every language and culture. So, we celebrate difference, we are inclusive and believe that diversity makes us strong. We want every employee to grow as an individual and excel in their career.

In return, we expect all our people to live by the values that unite us: to partner , putting clients fist and winning together, to pioneer , innovating fearlessly and leading with vision and courage, to progress , aiming high and growing through actions and to deliver , owning the outcome and building trust with our colleagues and clients.

RWS embraces DEI and promotes equal opportunity, we are an Equal Opportunity Employer and prohibit discrimination and harassment of any kind. RWS is committed to the principle of equal employment opportunity for all employees and to providing employees with a work environment free of discrimination and harassment. All employment decisions at RWS are based on business needs, job requirements and individual qualifications, without regard to race, religion, nationality, ethnicity, sex, age, disability, or sexual orientation. RWS will not tolerate discrimination based on any of these characteristics.

RWS Values

Get the 3Ps right - Partner, Pioneer, Progress - and we´ll Deliver together as RWS.

Recruitment Agencies: RWS Holdings PLC does not accept agency resumes. Please do not forward any unsolicited resumes to any RWS employees. Any unsolicited resume received will be treated as the property of RWS and Terms & Conditions associated with the use of such resume will be considered null and void.

#LI-IV1 #LI-Hybrid

Options

Software Powered by ICIMS