Principal Security Engineer

Brackley, UK, We have an exciting opportunity within our Enterprise Technology team for a Principal Information Security Engineer. This is a senior, hands‑on role. Our in‑house security capability continues to mature, and there is a real opportunity to shape it. This role is about establishing the foundations, including the technical security frameworks, standards and operating practices that underpin how we protect systems across both factory and trackside environments, while remaining hands‑on to turn them into reality.

You’ll set the technical direction for security engineering and operations, strengthen controls across the wider technology estate, lead and develop a small team of security engineers, and work closely with other IT functions to embed security into how we design, deliver and operate technology. You’ll have the autonomy and seniority to shape the capability, drive meaningful improvements and establish a consistent, effective approach to security across Enterprise Technology.

This role requires you to be onsite a minimum of 3‑4 days a week at our campus in Brackley.

• Establish and mature technical security frameworks, standards and operating practices, ensuring clear control ownership, measurable effectiveness and alignment with the wider security governance and risk management approach.
• Set the technical direction for security engineering and operations, covering preventative controls, monitoring, detection, investigation and incident response, while remaining hands‑on in technical delivery.
• Own and mature the security tooling stack, including configuration, tuning, integrations and continuous improvement.
• Define and drive practical security improvements across identity, endpoints, networks, cloud, applications and data, strengthening controls, reducing attack paths and improving detection effectiveness.
• Act as the senior technical security authority across Enterprise Technology, partnering with IT teams to establish standards, clarify control ownership, drive remediation and enable informed risk decisions.
• Lead, develop and mentor the engineers in the team, raising capability and setting the technical standard.
• Translate emerging threats, vulnerabilities and changes in the technology landscape into proportionate security controls, engineering priorities and continuous improvement activities.
• Establish meaningful security performance measures, using operational metrics, control effectiveness and risk trends to demonstrate progress, identify gaps and drive continuous improvement.
• Own and optimise third‑party relationships, including MSSPs and tooling vendors, holding partners to account on performance and value.

• Experience with platforms such as Crowd Strike or similar ecosystems.
• Experience building automation for enrichment and response, including SOAR and scripting.
• Experience working with managed security providers or specialist partners
• Experience establishing security governance in a fast‑paced or high‑performance environment.
• Experience contributing to enterprise security architecture, secure‑by‑design principles and the implementation of preventative security controls.

• A builder first. Energised by establishing structure, standards and capability, with the technical depth and determination to turn ideas into practical, measurable improvements.
• Comfortable as the senior technical authority in a small team, leading through expertise and example.
• Driven, tenacious and outcome‑focused, with a strong bias for completing work and closing the loop
• Pragmatic and adaptable, able to balance risk, pace and delivery without over‑engineering.
• Calm and decisive under pressure, particularly during incidents or time‑critical…