# Sr. Associate Director, Software Engineering **Company**: GCIO **Location**: Guangzhou, Guangdong **Experience**: senior **Job type**: full-time **Category**: IT **Industry**: Finance **Apply**: https://portal.careers.hsbc.com/careers/job/563774612437972?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply **Canonical**: https://yubhub.co/jobs/job_e88e28eb-67b ## Description We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Software Engineering. **Principal Responsibilities** - Own the day-to-day health, uptime, monitoring, and reliability of services and server infrastructure. - Collaborate on regular UAT/Production release, w.r.t Release Planning/Review/Tag/Release execution and post health-check. - Participate in architecture and design reviews to provide recommended improvements to development teams to improve the reliability of applications. - Minimize manual involvement by implementing continuous security improvements that create a secure operating environment, including developing new security tools, dynamically monitoring for vulnerabilities, alerting on security events, and automated self-healing recovery processes. - Engage in application performance analysis, system tuning and capacity planning. - Perform root cause analysis to identify issues and implement continuous improvements to prevent future occurrences. - Capable of presenting analyses and recommendations to leadership or discussing the technical merits of security solutions with engineers and architects. - Moderate level of technical complexity experience with multiple integrated applications. - Engineer secure solutions on foundation platform using Infrastructure as Code (IaC) methods (e.g., Terraform). - Ensure compliancy with Operational risk and security standards (E.g. Network, Firewall, OS, Logging, Monitoring, Availability, Resiliency). - Build and support continuous integration (CI), continuous delivery (CD) and continuous testing activities, integrating security tools and automated security checks into the pipeline (e.g., SAST, DAST, CONT, FOSS). - Develop and maintain security documentation and procedures. - Mentor other engineers on security best practices. - Lead incident response activities for security incidents. **Requirements** - Expert understanding of DevOps principles and Infrastructure as a Code concepts and techniques, including security as code. - Strong understanding of DevOPS/CI/CD and available tools, including Jenkins, Ansible and security testing tools. - Experienced in full automation and configuration management with a security-first approach. - Experience building a range of Services in a Cloud Service provider (ideally GCP/Azure]) with a strong security focus. - Demonstrable Cloud service provider experience (ideally GCP/Azure]) - infrastructure build and configurations of a variety of services including Compute, Storage, Networking, and Security services. - Experience in containerized solution, e.g., docker/GKE and container security best practices. - Strong understanding of Security and Compliance, e.g., IAM, cloud compliance/auditing/monitoring tools and security frameworks such as CIS benchmarks, NIST standards. - Experience in Linux compute system, e.g., file system/schedule system/boot system and essential command with shell. - Excellent skills in at least one of following: Python, Ruby, Java, JavaScript, Go, Groovy, Scala, with a focus on secure coding practices. - A track record of constantly looking for ways to do things better and an excellent understanding of the mechanism necessary to successfully implement change with a security mindset. - A successful track record of delivering complex projects and/or programs, utilizing appropriate techniques and tools to ensure and measure success, as well as making good documentation to record what we have achieved. - Built effective networks across business areas, developing relationships based on mutual trust and encouraging others to do the same. - Customer/stakeholder focus. Ability to build strong relationships with Application teams, cross-functional IT, and global/local IT teams. - Good leadership and teamwork skills - Works collaboratively in an agile environment with DevOps application ‘pods' to provide Cloud specific capability/skills required to deliver the service. - Operational effectiveness - delivers solutions that align to approved design patterns and security standards. - A comprehensive understanding of risk management and proven experience of ensuring own/others' compliance with relevant regulatory processes. ## Skills ### Required - DevOps - Infrastructure as Code - Cloud Security - Containerization - Security Compliance - Linux - Python - Ruby - Java - JavaScript - Go - Groovy - Scala ### Nice to have - GCP - Azure - Terraform - Jenkins - Ansible --- Source: [Apply at portal.careers.hsbc.com](https://portal.careers.hsbc.com/careers/job/563774612437972?utm_source=yubhub.co&utm_medium=jobs_feed&utm_campaign=apply)