Principal Security Engineer

PRINCIPAL SECURITY ENGINEER | UK | LANGLEY HYBRIDTravel obsessed? Big tech fan? Hey, you’re in good company. If you want to be part of the industry that makes the world go round, then look no further. Travelport is the brains behind lots of your travel bookings- plane, car or hotel. Our technology is used to book that magical holiday, infamous bachelorette party or long overdue school reunion.

While we can’t solve mosquito bites or lost luggage, we can simplify a lot of the technical parts of travel, and we’re looking for the best thinkers to help us do it.

We’re hiring right now for a Senior Cloud Engineer! Search for #Travelport on Linked In and hear from our amazing team.

How you’ll make an impact:

The Principal Security Engineer is a senior individual contributor responsible for providing deep technical security expertise across the organization’s applications, infrastructure, networks, cloud environments, and security platforms.

Working closely with the Engineering and Architecture teams, this role helps translate security strategy, architectural principles, and regulatory requirements into practical, scalable technical solutions. The Principal Security Engineer will serve as a trusted technical advisor to engineering, infrastructure, cloud, network, architecture, and product teams, helping ensure security is incorporated throughout the design and implementation lifecycle.

The ideal candidate combines broad cybersecurity expertise with deep technical knowledge in networking, identity and access management, application security, cloud security, and security technologies. This individual should be equally comfortable reviewing an application architecture, troubleshooting a complex network or authentication issue, developing a security design, and collaborating with architects and engineers to implement effective security controls.

Your role in action:

Serve as a senior technical security expert across application, network, cloud, and infrastructure security.

Partner closely with the engineering and architecture teams to develop, evaluate, and implement secure technology environments.

Translate security approach principles, standards, and reference patterns into practical technical implementations.

Participate in architecture and design reviews for new applications, platforms, infrastructure, and significant technology changes.

Identify security risks within proposed architectures and work collaboratively with engineering and architecture teams to develop pragmatic solutions.

Apply security best practices to common application architectures, including web applications, APIs, microservices, distributed systems, and cloud-native applications.

Perform technical threat modeling and security design assessments for critical applications and infrastructure.

Act as an escalation point for complex security engineering and architecture issues.

Provide deep technical expertise in Identity and Access Management (IAM) technologies and platforms.

Review cloud environments and application architectures for adherence to security standards and best practicesPCI DSS, Compliance & Risk Provide technical security expertise in support of PCI-DSS and other security compliance programs.

Interpret PCI-DSS requirements and translate them into practical technical controls and implementation guidance.

Design and validate network segmentation and scope-reduction strategies for PCI environments.

Work with Engineering, Architecture, Governance, Risk and Compliance teams to ensure security controls satisfy technical and regulatory requirements.

Support security assessments, technical evidence gathering, remediation activities, segmentation validation, and discussions with internal and external assessors.

Help evaluate…