Sr. Associate Director, Software Engineering

Some careers have more impact than others.

If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.

We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Software Engineering.

Business: Group Functions Technology L3

Principal responsibilities

* Own the day-to-day health, uptime, monitoring, and reliability of services and server infrastructure.

* Collaborate on regular UAT/Production release, w.r.t Release Planning/Review/Tag/Release execution and post health-check.

* Participate in architecture and design reviews to provide recommended improvements to development teams to improve the reliability of applications.

* Minimize manual involvement by implementing continuous security improvements that create a secure operating environment, including developing new security tools, dynamically monitoring for vulnerabilities, alerting on security events, and automated self-healing recovery processes.

* Engage in application performance analysis, system tuning and capacity planning.

* Perform root cause analysis to identify issues and implement continuous improvements to prevent future occurrences.

* Capable of presenting analyses and recommendations to leadership or discussing the technical merits of security solutions with engineers and architects.

* Moderate level of technical complexity experience with multiple integrated applications

* Engineer secure solutions on foundation platform using Infrastructure as Code (IaC) methods (e.g., Terraform).

* Ensure compliancy with Operational risk and security standards (E.g. Network, Firewall, OS, Logging, Monitoring, Availability, Resiliency)

* Build and support continuous integration (CI), continuous delivery (CD) and continuous testing activities, integrating security tools and automated security checks into the pipeline (e.g., SAST, DAST, CONT, FOSS).

* Develop and maintain security documentation and procedures.

* Mentor other engineers on security best practices.

* Lead incident response activities for security incidents.

Requirements

* Expert understanding of DevOps principles and Infrastructure as a Code concepts and techniques, including security as code.

* Strong understanding of DevOPS/CI/CD and available tools, including Jenkins, Ansible and security testing tools.

* Experienced in full automation and configuration management with a security-first approach.

* Experience building a range of Services in a Cloud Service provider (ideally GCP/Azure]) with a strong security focus.

* Demonstrable Cloud service provider experience (ideally GCP/Azure]) - infrastructure build and configurations of a variety of services including Compute, Storage, Networking, and Security services.

* Experience in containerized solution, e.g., docker/GKE and container security best practices.

* Strong understanding of Security and Compliance, e.g., IAM, cloud compliance/auditing/monitoring tools and security frameworks such as CIS benchmarks, NIST standards.

* Experience in Linux compute system, e.g., file system/schedule system/boot system and essential command with shell.

* Excellent skills in at least one of following: Python, Ruby, Java, JavaScript, Go, Groovy, Scala, with a focus on secure coding practices.

* A track record of constantly looking for ways to do things better and an excellent understanding of the mechanism necessary to successfully implement change with a security mindset.

* A successful track record of delivering complex projects and/or programs, utilizing appropriate techniques and tools to ensure and measure success, as well as making good documentation to record what we have achieved.

* Built effective networks across business areas, developing relationships based on mutual trust and encouraging others to do the same.

* Customer/stakeholder focus. Ability to build strong relationships with Application teams, cross-functional IT, and global/local IT teams.

* Good leadership and teamwork skills - Works collaboratively in an agile environment with DevOps application ‘pods' to provide Cloud specific capability/skills required to deliver the service.

* Operational effectiveness - delivers solutions that align to approved design patterns and security standards.

* A comprehensive understanding of risk management and proven experience of ensuring own/others' compliance with relevant regulatory processes.

You’ll achieve more when you join HSBC.

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

***Issued By HSBC Software Development (GuangDong) Limited***