{"id":783113,"url":"https://alion.io/job/hiscox-principal-platform-security-engineer","title":"Principal Platform Security Engineer","company":{"id":449838,"name":"Hiscox","domain":"hiscoxgroup.com","url":"https://alion.io/company/hiscox-3","size_band":"1001-5000","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Workday","truth_index":{"grade":"B","score":84,"open_postings":8,"ghost_share":0,"stale_share":0.625,"repost_share":0,"time_to_fill_p50_days":39,"computed_at":"2026-10-29T05:49:05Z"}},"role":"Security","role_family":"Security","seniority":"lead","employment_type":"full_time","work_mode":"hybrid","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["York, United Kingdom","Lisbon, Portugal","London, United Kingdom"],"countries":["GB","PT"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":86000,"max_usd":152000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":28},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Agentic Workflows","optional":false},{"name":"Agile","optional":false},{"name":"Azure","optional":false},{"name":"Azure DevOps","optional":false},{"name":"CI/CD","optional":false},{"name":"GCP","optional":false},{"name":"IAM","optional":false},{"name":"Platform Engineering","optional":false},{"name":"Terraform","optional":false}],"status":"live","first_seen_at":"2026-06-17T00:00:00Z","employer_posted_date":"2026-09-18","last_verified_at":"2026-10-29T06:45:04Z","board_verified":true,"closed_at":null,"days_open":134,"trust":{"level":"stale","repost_count":0,"flags":["stale"],"days_open":134},"description":"Job Type:\nPermanentBuild a brilliant future with Hiscox\nPosition: Principal Platform Security Engineer, London Market\nAs a senior and influential member of the London Platform Engineering Chapter, the Principal Platform Security Engineer will set direction and lead by example in maturing our platform security practices. You will guide multiple Innovation squads and Engineering Chapters, driving cloud-first adoption and championing secure-by-design initiatives.\nYou will be an integral member of a Chapter spanning Platform, DevOps, and Site Reliability Engineers, and a core contributor to a Platform Engineering squad focused on continuous improvement across our cloud and on-premises platforms. You will raise engineering standards through automation, reliable design, and pragmatic governance, helping to deliver smarter, more cost-effective, and faster solutions that are reusable across squads.\nWith security embedded across all squads, you will provide visible leadership to strengthen our platform security posture. You will influence priorities, drive the change needed to embed modern DevOps and security ways of working, and ensure teams have the patterns, tooling, and guidance to succeed.\nAs the chapter grows, this role also offers the opportunity to take on people leadership responsibilities, including day-to-day management of third-party security engineers and partner resources.\nKey Responsibilities\nCoach and mentor chapter members, and support the Head of Platform Engineering with overall chapter management, particularly across partner resources.\n\nDesign, implement, and automate security controls and security testing within the SDLC.\n\nLead application security practices, ensuring secure design and build, and coordinate effectively between engineering and security teams.\n\nApply Security-as-Code principles by providing training, creating reusable patterns, and establishing best practices for teams.\n\nSupport the investigation and future implementation of agentic workflows and agents, ensuring proposed solutions are secure-by-design and comply with Hiscox AI governance.\n\nRespond swiftly to new and emerging security threats and vulnerabilities, investigate suspected attacks, and help manage security incidents, including post-incident reviews to identify root causes, implement solutions, and prevent recurrence.\n\nProduce clear, actionable security reporting for senior leadership\n\nAct as the primary point of contact for security-related inquiries across London Market technology and change initiatives, coordinating with Group, other Business Units, and Cyber teams to advance security practices across Hiscox.\n\nInfluence key architectural decisions early, balancing business requirements, budgets, security, and resilience. Partner with squads to take solutions from proof of concept (PoC) through to a production-ready platform.\n\nBuild and maintain secure Azure and GCP infrastructure across all environments using Azure DevOps Pipelines and Terraform.\n\nOversee and coach squads on intra-day deployment mechanisms, advocating for cloud-informed improvements that increase security, reliability, and delivery speed.\n\nBuild and maintain monitoring and alerting at all levels (infrastructure, application, and data), ensuring actionable signals and secure operational practices.\n\nPerson Specification :\nMandatory skillset:\n5+ years’ DevOps/Platform Engineering experience delivering solutions in Azure and/or GCP.\n\nFull-stack application and infrastructure solution design, ensuring robust security controls, high availability, and operational resilience throughout.\n\nWorking knowledge of vulnerability and compliance management (scanning through to remediation), patch management, endpoint protection/anti-malware, and access control management (e.g., IAM/PAM), including driving findings to closure.\n\nWorking knowledge of threat modelling and risk assessment, applied to cloud architectures and CI/CD pipelines to guide secure design and prioritised risk treatment.\n\nExperience with AppSec tooling, including CI/CD integration, tuning to reduce noise, and triaging results with engineers to prioritise remediation and prevent regressions.\n\nStrong leadership skills. You will help lead the wider technology and change teams to improve our DevOps and Security maturity by educating others and delegating responsibilities across your chapter, other engineering chapters, and Group IT teams.\n\nExperience with Terraform, and platform solutions.\n\nExperience working on solutions with integrations between GCP and Azure.\n\nKnowledge of Cloud native, microservices and containerised systems.\n\nTo have a strong desire for continuous improvement and an Agile way of working.\n\nIdeally in addition:\nKnowledge of the insurance and London Market ecosystem; Lloyd’s market experience is particularly valuable.\n\nProven, hands-on software delivery experience, including platform engineering and/or build, release, and deployment engineering using modern DevOps practices.\n\nExperience delivering and operating technology in regulated environments, with a strong understanding of controls, audit expectations, and evidence-based compliance.\n\nAble to clearly explain the processes, patterns, and tooling used to ensure quality, stability, performance, scalability, secure deployment, maintainability, and effective documentation.\n\nBroad awareness of major cloud providers and services, with curiosity to evaluate and adopt capabilities that improve security, reliability, and cost efficiency.\n\nProactive and improvement-focused, challenging the status quo and driving automation and simplification wherever it adds value.\n\nStrong delivery focus, able to prioritise effectively and deliver outcomes in a fast-paced environment with shifting demands.\n\nAble to operate effectively in a small, high-impact team while collaborating across a wider product/engineering organisation.\n\nExcellent communication and stakeholder-management skills, able to influence at all levels and present complex topics clearly.\n\nComfortable working in ambiguity and adapting quickly as priorities, technology, and threats evolve.\n\nUp-to-date knowledge of security practices, processes, and tooling, with the judgement to apply emerging approaches pragmatically.\n\nWhy Hiscox?\nThis is a fantastic opportunity to join Hiscox during a time of focused growth where you will have the remit to make a real difference.\nAt Hiscox we care about our people. We hire the best people for the job and we’re committed to diversity and creating a truly inclusive culture, which we believe drives success.\nWork with amazing people and be part of a unique culture","description_format":"text","description_chars":6637,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[{"name":"United Kingdom","iso":"GB","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":[],"lifecycle":[{"event":"open","at":"2026-09-12T01:07:35Z"}],"visa":[],"liveness":{"score":16,"band":"cold","label":"Long shot","p_open":1,"p_active":0.579,"p_room":0.28,"age_days":134,"expected_fill_days":39,"reasons":["conf:4","velocity","win:tail","crowd:"],"computed_at":"2026-10-29T05:49:05Z"},"pay":null,"html_url":"https://alion.io/job/hiscox-principal-platform-security-engineer","json_url":"https://alion.io/job/hiscox-principal-platform-security-engineer.json","meta":{"generated_at":"2026-10-29T07:54:47Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":12078,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-30T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":449838},"rest":"https://alion.io/mcp/rest/get_company?id=449838"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhiscox-principal-platform-security-engineer"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhiscox-principal-platform-security-engineer"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhiscox-principal-platform-security-engineer"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/hiscox-principal-platform-security-engineer\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhiscox-principal-platform-security-engineer"}],"agent":{"mcp":"https://alion.io/mcp/jobs","mcp_open":"https://alion.io/mcp/open","next":[{"tool":"get_job","arguments":{"id":783113}},{"tool":"search_jobs","arguments":{"company":"hiscoxgroup.com","detail":"compact"}},{"tool":"match_people","arguments":{"job_id":783113},"note":"people open to offers who fit this vacancy"}],"note":"The same data through MCP tools: https://alion.io/mcp/open needs no sign-in (compact searches, postings, people); https://alion.io/mcp with an Alion account has everything. Docs: https://alion.io/developers"}}