HSBC Group

Lead DevSecOps Engineer

Join a digital first bank that’s powered by people.

Our technology team builds innovative digital solutions rapidly and at scale to deliver the next generation of banking services for our customers around the world.

In our cybersecurity team you’ll be helping to safeguard the financial system on which millions of people depend.

You’ll be making banking more secure by designing, implementing, and operating controls to manage cybersecurity risk. You’ll help define HSBC Group cyber security standards, deliver Global Security Operations ad Threat management services, provide round-the-clock monitoring and security incident response services, and oversee Network/Application/Infrastructure Security. The work you do will provid3e assurance of the adequacy and effectiveness of security controls to Business Risk Owners.


The Lead DevSecOps Engineer will be a key part of the Secure Development Optimisation team, reporting to the Global Head of Secure Development Optimisation. The role will deliver security solution designs and pattern development within an agile, DevSecOps software delivery environment. It will involve working closely with a wide range of engineering stakeholders from various business areas across HSBC including Cybersecurity, liaising with them to understand the problem areas, defining pattern requirements, develop and deliver implementation patterns that optimise the integration between DevOps Engineering Platforms and Cyber tools.

As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.



In this role you will:

• Driving improvements in developer experience, integration, and automation of security tooling.
• Partnering with development teams across Cybersecurity and the wider Business, providing technical leadership as required.
• Provisioning, configuring, administrating, automating, monitoring, and supporting enterprise Cybersecurity services deployed on Prem and into Cloud
• Supporting the planning and migration/replacement of legacy security tools, with tools fully integrated into the application team’s/developer community’s ways of working.
• Enforcing (through automation) continuous compliance to industry operation and security standards.
• Creating new tools/scripts to optimise security checks within pipelines and throughout the whole stack.
• Performing discovery on existing software delivery processes, document and recommend improvements.
• Partnering with product owners and stakeholder to prioritise backlogs and manage new requests.
• Communicating challenging technical presentations to both technical and non-technical group.

To be successful in this role you should meet the following requirements:

• Experience in:
• DevOps Engineering – building CI/CD pipelines in Jenkins.
• Producing integration design artefacts.
• Integration with API’s of operations or Cyber tooling (e.g. code scanning, Hashicorp Vault, Venafi).
• Developing Infrastructure as Code.
• Cloud Engineering.
• Sysadmin experience of Cybersecurity or DevOps tooling.
• Development experience in one or more of Java, Python etc
• Good knowledge of general infrastructure – networking, operating systems etc.
• Good understanding of DevSecOps and how it maps into the Software Development Lifecycle.
• Professional IT Security qualifications and/or certification.
• An inquisitive approach, always asking how to achieve goals in a smarter and more effective way.
• An ability and interest to learn and experiment with new approaches in different contexts, across the amazing scale that HSBC brings.

This role is based in London.

Opening up a world of opportunity
 

Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces. Our recruitment processes are accessible to everyone -  no matter their gender, ethnicity, disability, religion, sexual orientation, or age.

We take pride in being part of the Disability Confident Scheme. This helps make sure you can be interviewed fairly if you have a disability, long term health condition, or are neurodiverse.

If you’d like to apply for one of our roles and need adjustments made, please get in touch with our Recruitment Helpdesk:

Email: hsbc.recruitment@hsbc.com
Telephone: +44 207 832 8500