Principal Security Specialist

About the role

We are looking for a Principal Security Specialist to lead the security posture of our strategic product portfolio and internal applications. The role will work closely with security champions across teams, embed security throughout the software development lifecycle and ensure rapid remediation of vulnerabilities in production.

Key responsibilities

• Partner with Security Champions to strengthen security capabilities and evolve the champion program.
• Drive continuous improvement of the secure SDLC and champion a modern DevSecOps approach.
• Serve as the primary security contact for product delivery and engineering teams on major product groups.
• Assess strategic Sage products and systems, identify weaknesses and define remediation plans.
• Support security compliance activities and manage relationships with auditors.
• Identify, evaluate and introduce new security tools and vendor solutions.
• Lead the design and implementation of enhanced security processes and standards.
• Mentor junior team members and provide technical leadership on large projects.
• Represent the organization at industry forums, conferences and open‑source initiatives.

Required profile

• Minimum 8 years of commercial experience in security engineering.
• Proven track record implementing security controls in the software development lifecycle.
• Experience securing public‑cloud SaaS applications.
• Hands‑on experience with agile, DevOps/DevSecOps environments and distributed teams.
• Familiarity with formal compliance frameworks such as SOC, ISO 27001 or PCI‑DSS.
• Relevant professional security certification (e.g., CISSP, CSSLP) and a degree in a related field.
• Fluent written and spoken English.

Required skills

• Secure SDLC implementation
• Public‑cloud SaaS security
• DevSecOps practices
• Security operations
• SOC compliance
• ISO 27001
• PCI‑DSS
• CISSP certification
• CSSLP certification