Senior Cloud Data Security Engineer – Infrastructure & Automation

The role is for a leading global financial services organization focusing on data security and compliance in cloud environments across AWS, GCP, Azure, and AliCloud. The position supports HSBC's data security framework and enterprise-wide security strategies within a highly regulated industry.

• At least 5 years of experience in cybersecurity with a focus on Structured Data Security engineering.
• Practical experience with cloud-native solutions and data structures on AWS, GCP, Azure, and AliCloud.
• Strong knowledge of structured data, Database Activity Monitoring (DAM), and data security controls.
• Proficiency in Python for automation, scripting, data processing, and cloud infrastructure tooling.
• Hands-on experience with UNIX/Linux environments and Bash/shell scripting.
• Expertise with AWS services such as EC2, S3, RDS, Lambda, VPC, and IAM.
• Familiarity with Terraform for infrastructure management.
• Experience building and maintaining CI/CD pipelines (e.g., GitHub, Jenkins) and integrating automated testing frameworks.
• Deep understanding of JSON data formats, parsing, and normalization techniques.
• Solid grasp of networking concepts and cloud security best practices.

Nice to have:

• Relevant certifications related to cloud security or automation.

• Support the delivery and operation of structured data cloud logging and monitoring strategies to ensure robust data security measures.
• Act as a key technical representative for the Engineering function on cloud data security matters.
• Assist in implementing controls ensuring compliance with HSBC's Information Security policies and regulatory standards.
• Collaborate with cross-functional teams to execute enterprise-wide IT strategies related to cloud security and data protection.
• Maintain visibility of security risks, exposures, and control effectiveness as part of the 1st Line of Defense.
• Engage with global and regional stakeholders including cyber security, architecture, security engineering, and business functions to promote security best practices.

Only candidates with an existing legal right to work in the European Union will be considered for this role.