Impress employers and recruiters.
Choose from hundreds of resume examples.

Target Resume Now

About the Role

As a senior and influential member of the London Platform Engineering Chapter, the Principal Platform Security Engineer will set direction and lead by example in maturing platform security practices. This role guides multiple Innovation squads and Engineering Chapters, driving cloud-first adoption and championing secure-by-design initiatives. You will be an integral member of a Chapter spanning Platform, DevOps, and Site Reliability Engineers, and a core contributor to a Platform Engineering squad focused on continuous improvement across cloud and on-premises platforms. The role involves raising engineering standards through automation, reliable design, and pragmatic governance, delivering smarter, more cost-effective, and faster reusable solutions. With security embedded across all squads, you will provide visible leadership to strengthen platform security posture, influence priorities, and drive change to embed modern DevOps and security ways of working. This position also offers the opportunity for people leadership responsibilities, including managing third-party security engineers and partner resources.

Responsibilities

Coach and mentor chapter members.
Support the Head of Platform Engineering with overall chapter management, particularly across partner resources.
Design, implement, and automate security controls and security testing within the SDLC.
Lead application security practices, ensuring secure design and build.
Coordinate effectively between engineering and security teams.
Apply Security-as-Code principles by providing training, creating reusable patterns, and establishing best practices.
Support the investigation and implementation of agentic workflows and agents, ensuring secure-by-design solutions and Hiscox AI governance compliance.
Respond swiftly to new and emerging security threats and vulnerabilities.
Investigate suspected attacks and help manage security incidents.
Conduct post-incident reviews to identify root causes, implement solutions, and prevent recurrence.
Produce clear, actionable security reporting for senior leadership.
Act as the primary point of contact for security-related inquiries across London Market technology and change initiatives.
Coordinate with Group, other Business Units, and Cyber teams to advance security practices across Hiscox.
Influence key architectural decisions early, balancing business requirements, budgets, security, and resilience.
Partner with squads to take solutions from proof of concept to a production-ready platform.
Build and maintain secure Azure and GCP infrastructure across all environments using Azure DevOps Pipelines and Terraform.
Oversee and coach squads on intra-day deployment mechanisms, advocating for cloud-informed improvements.
Build and maintain monitoring and alerting at all levels (infrastructure, application, and data), ensuring actionable signals and secure operational practices.

Requirements

5+ years of DevOps/Platform Engineering experience delivering solutions in Azure and/or GCP.
Full-stack application and infrastructure solution design, ensuring robust security controls, high availability, and operational resilience.
Working knowledge of vulnerability and compliance management (scanning through to remediation).
Working knowledge of patch management, endpoint protection/anti-malware, and access control management (e.g., IAM/PAM).
Ability to drive findings to closure in vulnerability and compliance management.
Working knowledge of threat modeling and risk assessment, applied to cloud architectures and CI/CD pipelines.
Experience with AppSec tooling, including CI/CD integration, tuning to reduce noise, and triaging results with engineers.
Strong leadership skills.
Ability to lead technology and change teams to improve DevOps and Security maturity through education and delegation.
Experience with Terraform and platform solutions.
Experience working on solutions with integrations between GCP and Azure.
Knowledge of cloud-native, microservices, and containerized systems.
Strong desire for continuous improvement and an Agile way of working.
Knowledge of the insurance and London Market ecosystem (ideal).
Lloyd’s market experience (ideal).
Proven, hands-on software delivery experience, including platform engineering and/or build, release, and deployment engineering using modern DevOps practices (ideal).
Experience delivering and operating technology in regulated environments, with a strong understanding of controls, audit expectations, and evidence-based compliance (ideal).
Ability to clearly explain processes, patterns, and tooling for quality, stability, performance, scalability, secure deployment, maintainability, and effective documentation (ideal).
Broad awareness of major cloud providers and services, with curiosity to evaluate and adopt capabilities that improve security, reliability, and cost efficiency (ideal).
Proactive and improvement-focused, challenging the status quo and driving automation and simplification (ideal).
Strong delivery focus, able to prioritize effectively and deliver outcomes in a fast-paced environment with shifting demands (ideal).
Ability to operate effectively in a small, high-impact team while collaborating across a wider product/engineering organization (ideal).
Excellent communication and stakeholder-management skills, able to influence at all levels and present complex topics clearly (ideal).
Comfortable working in ambiguity and adapting quickly as priorities, technology, and threats evolve (ideal).
Up-to-date knowledge of security practices, processes, and tooling, with the judgment to apply emerging approaches pragmatically (ideal).

Skills

DevOps
Platform Engineering
Azure
GCP
Full-stack application design
Infrastructure solution design
Security controls
High availability
Operational resilience
Vulnerability management
Compliance management
Patch management
Endpoint protection
Anti-malware
Access control management (IAM/PAM)
Threat modeling
Risk assessment
Cloud architectures
CI/CD pipelines
AppSec tooling
CI/CD integration
Leadership
Terraform
Platform solutions
Cloud native systems
Microservices
Containerized systems
Continuous improvement
Agile methodologies
Software delivery
Build engineering
Release engineering
Deployment engineering
Stakeholder management
Communication
Automation
Simplification
Security practices
Security tooling

Location

London Market

Work Type

Permanent

Experience Level

Senior
Principal
5+ years’ DevOps/Platform Engineering experience
People leadership responsibilities

Benefits

Great employee benefits that take care of mental and physical wellbeing.

About the Company

Hiscox is a global, specialist insurer headquartered in Bermuda and listed on the London Stock Exchange.
The company has 3,000 employees and 32 offices in 12 countries.
Hiscox offers opportunities for talented, ambitious individuals.
The company prioritizes strong values such as integrity and courage.
Employees collaborate to do the right thing for each other and customers.

Equal Opportunity

Hiscox hires the best people for the job and is committed to diversity and creating a truly inclusive culture, which drives success.