# Principal Engineer - Cybersecurity

**Company**: HSBC
**Location**: London
**Work arrangement**: onsite
**Experience**: senior
**Job type**: full-time
**Category**: Engineering
**Industry**: Finance

**Apply**: https://portal.careers.hsbc.com/careers/job/563774610267866?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply
**Canonical**: https://yubhub.co/jobs/job_012cc174-628

## Description

Engineer and defend the digital backbone of one of the world's largest global banks, raising the bar for Cyber engineering with real hands-on impact.

HSBC Technology builds and runs digital services that help millions of customers bank quickly, simply and securely.

This role is central to making a step-change in engineering capability and accelerating Cybersecurity's vision of Engineering Excellence: a world-class engineering capability that helps HSBC navigate cyber risk with innovative, responsive, frictionless technologies and services.

**Key Responsibilities**

- Drive improvements in engineering practice across Cyber: how we design, build, run and continuously improve services

- Help mature 'the way we do things': standards, patterns, governance and pragmatic guardrails that speed delivery safely

- Improve build and deployment automation, reducing friction and increasing reliability

- Support simplification of the technology stack, reducing complexity and operational risk

**Hands-on Technical Leadership**

- Stay hands-on in development while leading technical direction

- Contribute to strategy and direction for cyber engineering capability and service evolution

- Drive both technical and cultural change: empowerment, experimentation, learning, partnership and delivery

**Architecture & Secure Solution Design**

- Lead architecture and design across solution design and end-to-end system design targeted at specific cyber outcomes

- Shape global services across cloud, on-prem and hybrid deployments in a highly regulated environment

- Build and influence enterprise-scale full stack engineering and custom security software approaches

**DevSecOps & Automation**

- Advance DevSecOps maturity: automated build, end-to-end testing and deployment pipelines across multiple stacks and toolchains

- Improve how services are operated in production: resilience, repeatability and safe change at pace

**Cybersecurity Engineering Depth**

- Apply deep experience across one or more cybersecurity domains, such as: network, endpoint and cloud security, cryptography, malware analysis, vulnerability assessment, PAM, anomaly/intrusion detection, incident response, offensive security

- Bring a practical R&D mindset-knowing when to prototype, when to standardise and when to simplify

**Requirements**

- Extensive experience in a cybersecurity discipline as a Principal Technical Architect / Principal Engineer

- Strong software engineering capability with excellent coding skills and enterprise delivery experience

- Proven experience developing large enterprise software solutions across cloud / on-prem / hybrid in regulated industries (financial services preferred)

- Strong architecture and end-to-end system design capability aligned to cyber outcomes

- Demonstrable ability to communicate technical solutions to senior engineers and strategic vision and concepts to senior management

- DevSecOps expertise: automated build, testing and deployment pipelines across multiple tech stacks/tools

- Professional-level cloud certification in Architecture or DevOps (e.g. AWS Solutions Architect Professional, GCP Professional DevOps Engineer) or equivalent cloud security specialism

- Security certification such as SANS GIAC, OSCP, or equivalent

- A strong STEM oriented background

**Why this role matters**

You'll help build a Cyber engineering culture where engineers thrive solving hard security problems with pace and safety and delivering services that protect the bank and customers every day.

## Skills

### Required
- cybersecurity
- software engineering
- cloud security
- cryptography
- malware analysis
- vulnerability assessment
- PAM
- anomaly/intrusion detection
- incident response
- offensive security

---

Source: [Apply at portal.careers.hsbc.com](https://portal.careers.hsbc.com/careers/job/563774610267866?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)