Engineering Design Manager

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

Your career opportunity

CSAT (Cyber Security Assurance and Testing) is a department within Cyber Security at HSBC. It owns the controls and services that provide pre-production and production application and infrastructure security scanning, remediation management and reporting.

The ideal candidate will be able to both, technically lead from the front, and possess the ability to lead, inspire and motivate the team. A mix of technical skills, attention to detail and leadership is required. The successful candidate will also be required to build relationships with the broader Cyber and Enterprise architecture community and actively contribute at local Design Authority.

The role will report to the Global Head of CSAT Engineering and will be responsible for managing the architecture and solution design team within CSAT. You will be managing a team of 4-5 technical architects/designers that are responsible for designing the solutions used withing CSAT change and run programmes. This includes a significant programme of rearchitecting and migration of our core services to cloud infrastructure. In addition, the team are responsible for supporting the engineering team to deliver changes to services and ensure that the design documentation is approved at the necessary governance forums, taking on feedback and adapting the designs as appropriate.

What you’ll do

• Leading the technical design of systems and services in the CSAT space
• Leading the team of technical architects within CSAT Engineering and liaising with other architecture teams across HSBC
• Developing and supporting all architectural artefacts for the projects that will implement these changes, including but not limited to: Architecture Impact Assessments; External Hosting Considerations to support Enterprise Architecture sign off to host the service in a cloud; Solution Design documents; Design authority sign off appropriate documentation; Producing artefacts in sufficient detail so that they can be consumed by the engineering delivery team.
• Driving Tech/Arch requirements to meet business requirements for the technologies being deployed, which must be aligned to Sec Arch strategy.
• Advising on important security-related technologies and assessing the risk associated with proposed changes.
• Delivering architectural patterns and support quality assurance initiatives in the Engineering team.
• Interacting with and influencing senior stakeholders across departments.
• Collaborating with cross-functional teams to align the security data management system with overall business objectives.
• Staying abreast of emerging technologies and security trends to continually enhance the systems capabilities and apply innovative security architecture solutions to new or existing problems to able to justify and communicate design decisions.

What you need to have to succeed in this role

• Extensive experience in information security and/or IT risk management with a focus on security, performance, and reliability.
• Strong expertise in cloud technologies and integration with on-prem data centres, particularly Kubernetes and GCP.
• 5+ years’ experience owning and developing application and service architectures including the processes, infrastructure layers and application layers and how to integrate through SDLC build services such as CI and CD pipelines.
• Extensive experience with microservice architecture in Kubernetes
• Solid understanding of security protocols, cryptography, authentication, authorisation, and security.
• Good understanding of the foundation of SDLC and software delivery including DevOps and DevSecOps culture.
• Knowledge of Security Scanning tools and platforms including Nessus, Nessus IQ, Checkmarx, Netsparker, Aquasec (desirable but not essential).
• Knowledge of Vulnerability Scanning Capabilities (MAST, DAST, SAST, IAC, FOSS/SCA, Cloud, Infrastructure).

What we offer

• Competitive salary
• Annual performance-based bonus
• Additional bonuses for recognition awards
• Multisport card
• Private medical care
• Life insurance
• One-time reimbursement of home office set-up (up to 800 PLN).

• Corporate parties & events
• CSR initiatives
• Nursery discounts
• Financial support with trainings and education
• Social fund
• Flexible working hours 
• Free parking

If your CV meets our criteria, you should expect the following steps in the recruitment process:

• Online behavioural test (for external candidates only)
• Telephone screen (for external candidates only)
• Job interview with the hiring manager

We are looking to hire as soon as possible so don’t wait and apply now!

Youll achieve more when you join HSBC.