HSBC Group

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Senior Security Engineer – AI Security

In this role, you will:

• Integrate security practices into DevOps pipelines across the SDLC.
• Automate security testing in CI/CD pipelines using tools like SonarQube, Checkmarx, Snyk.
• Implement Infrastructure as Code (IaC) security with Terraform, AWS CloudFormation.
• Embed security controls into automated deployment workflows.
• Conduct security assessments of enterprise and AI applications.
• Perform static/dynamic code analysis and runtime behavior assessments.
• Regularly scan for vulnerabilities and manage remediation.
• Evaluate third-party and open-source components for risk.
• Design secure architectures for enterprise and AI/ML applications.
• Create and maintain security reference architectures and design patterns.
• Evaluate and recommend tools and technologies to improve security posture.
• Address data protection, IAM, and secure communication in system designs.
• Perform in-depth threat modeling using STRIDE and similar methodologies.
• Use tools like Microsoft Threat Modeling Tool to analyze potential threats.
• Execute pen tests on AI/GenAI systems to uncover vulnerabilities.
• Simulate adversarial attacks: data poisoning, evasion, prompt injection, etc.
• Use tools like CleverHans, SecML for adversarial robustness testing.
• Work closely with AI teams to fix vulnerabilities and harden models.

To be successful in this role, you should meet the following requirements:

• 5+ years in security engineering, including enterprise and AI security.
• Strong Cloud Security and DevSecOps implementation background.
• Proven experience in security assessments, threat modeling, and pen testing.
• Solid experience designing secure full-stack application and AI solutions.
• Bachelor's or Master’s degree in Computer Science, Cybersecurity, or related.
• Certifications: CISSP, CEH, OSCP.
• Bonus: Specialized AI/ML security certifications or training.
• Advanced proficiency with TensorFlow, PyTorch, and scikit learn; strong Python programming skills.
• Experience implementing adversarial attack and defense techniques (e.g., FGSM, PGD, DeepFool) and integrating robust optimization in model training.
• Experience in identifying and mitigating vulnerabilities in large language models (LLMs), including prompt injection and data poisoning defenses.
• Solid understanding of MLOps tools (Kubeflow, MLflow) and secure CI/CD pipeline practices for AI systems.
• Knowledge of legal and compliance standards relevant to AI security and data privacy.

You’ll achieve more when you join HSBC.

www.hsbc.com/careers

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by – HSBC Software Development India