If you’re looking for a career that will help you stand out, join HSBC, and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.
responsibilities :
Lead the technical design of systems and services in the CSAT space.
Develop and support all architectural artefacts for the projects that will implement these changes, including but not limited to: Architecture Impact Assessments, External Hosting Considerations to support Enterprise Architecture sign off to host the service in a cloud, Solution Design documents, Design authority sign off of appropriate documentation.
Drive Tech/ Arch requirements to meet business requirements for the technologies being deployed, which must be aligned to Sec Arch strategy.
Advise on important security-related technologies and assess the risk associated with proposed changes.
Deliver architectural patterns and support quality assurance initiatives in the Engineering team.
Interact with and influence senior stakeholders across departments.
Collaborate with cross-functional teams to align the security data management system with overall business objectives.
Stay abreast of emerging technologies and security trends to continually enhance the systems capabilities and apply innovative security architecture solutions to new or existing problems to able to justify and communicate design decisions.
requirements-expected :
Extensive experience in information security and/or IT risk management with a focus on security, performance, and reliability.
Strong expertise in cloud technologies and integration with on-prem data centres, particularly Kubernetes and GCP.
Senior experience owning and developing application and service architectures including the processes, infrastructure layers and application layers and how to integrate through SDLC build services such as CI and CD pipelines.
Extensive experience with microservice architecture in Kubernetes.
Solid understanding of security protocols, cryptography, authentication, authorisation, and security.
Good understanding of the foundation of SDLC and software delivery including DevOps and DevSecOps culture.
Knowledge of Security Scanning tools and platforms including Nessus, Nessus IQ, Checkmarx, Netsparker, Aquasec (desirable but not essential).
