Structured Data Security Infrastructure DevOps Engineer

The role involves working with the Cyber Security Data team at HSBC to support global data security delivery and integrate new cloud applications into existing security frameworks, focusing on structured data monitoring and logging across AWS, GCP, Azure, and AliCloud. The position involves using the Data Security Fabric product from Imperva Thales and managing large-scale data ingestion and analysis systems.

• Extensive cyber experience with a focus on Structured Data Security engineering
• Cloud native solutions and data structures experience on AWS, GCP, Azure, and AliCloud
• Knowledge in structured data security and database activity monitoring (DAM)
• Python programming for automation, scripting, data processing, and cloud infrastructure tooling
• Experience with UNIX/Linux environments and Bash/Shell scripting
• Strong hands-on experience with AWS services including EC2, S3, RDS, Lambda, VPC, and IAM
• Proven experience with Terraform for infrastructure provisioning and management
• Solid experience in building and maintaining CI/CD pipelines using GitHub and Jenkins
• Integration of automated testing frameworks into pipelines
• Strong understanding of data formats such as JSON and related parsing and normalization techniques
• Proven operational management experience ensuring consistent delivery
• Understanding of networking concepts and cloud security best practices
• Beneficial to have 4-5 years of cyber experience
• Experience working in highly regulated environments
• Leadership in best practices for risk and compliance management
• Ability to make strategic business decisions considering risks, long-term implications, commercial realities, and stakeholder needs
• Typically educated to degree level or equivalent

• Support the delivery and operation of global data security strategy and tooling
• Provide key representation and expertise for the engineering function
• Implement controls and ensure compliance with global Information Security policies and regulatory requirements
• Collaborate to implement enterprise-wide and regional IT strategy
• Ensure adherence to information security requirements and effective compliance
• Act as 1st Line Of Defense to monitor IT security risk profiles and provide robust challenge when risk appetites are breached
• Engage with regional and global stakeholders including cyber security colleagues and business/IT functions