Principal Platform Security Engineer

Overview

In this leadership role, you steer platform security across London Market initiatives, guiding multiple squads and engineering chapters toward secure-by-design outcomes. You drive cloud-first adoption, automation, and governance to deliver secure, scalable platforms. You’ll influence architecture and raise security standards while shaping the Chapter’s growth and talent. This is a mission-critical opportunity to elevate Hiscox’s security posture at scale.

Responsibilities

• Coach and mentor chapter members and support module leadership across partner resources
• Design, implement, and automate security controls and testing within the SDLC
• Lead application security practices and coordinate between engineering and security teams
• Apply Security-as-Code principles through training and reusable patterns
• Investigate and implement secure-by-design agentic workflows and AI governance
• Respond to threats, investigate incidents, and perform post-incident reviews
• Produce actionable security reporting for senior leadership
• Act as primary security liaison across London Market technology initiatives
• Influence architectural decisions early, balancing needs with security and resilience
• Build and maintain secure Azure and GCP infrastructure using Azure DevOps Pipelines and Terraform
• Oversee deployment mechanisms and advocate cloud-informed improvements for security and speed
• Build and maintain monitoring/alerting across infra, apps, and data for secure operations

Key requirements

• 5+ years’ DevOps/Platform Engineering experience in Azure and/or GCP
• Full-stack design with robust security controls and resilience
• Vulnerability and compliance management, patch management, endpoint protection, IAM/PAM
• Threat modelling and risk assessment for cloud architectures and CI/CD pipelines
• AppSec tooling with CI/CD integration and remediation prioritization
• Strong leadership capabilities to guide cross-team security maturity
• Experience with Terraform and platform solutions
• Experience integrating GCP and Azure solutions
• Knowledge of cloud-native, microservices, and containerised systems
• Agile mindset with continuous improvement ethos

• leadership
• clear communication
• stakeholder management
• Azure
• GCP
• Terraform

…