HSBC
Sr. Associate Director, Software Engineering
- Compensation
- Not disclosed
- Location
- Guangzhou, Guangdong, China
- Work setup
- Onsite
- Seniority
- Senior
- Employment
- Not specified
- Experience
- Not specified
- Category
- Software engineering
- Posted
Skills
Must have
- * Expert understanding of DevOps principles and Infrastructure as a Code concepts and techniques, including security as code.
- * Strong understanding of DevOPS/CI/CD and available tools, including Jenkins, Ansible and security testing tools.
- * Experienced in full automation and configuration management with a security-first approach.
- * Experience building a range of Services in a Cloud Service provider (ideally GCP/Azure]) with a strong security focus.
- * Demonstrable Cloud service provider experience (ideally GCP/Azure]) - infrastructure build and configurations of a variety of services including Compute, Storage, Networking, and Security services.
- * Experience in containerized solution, e.g., docker/GKE and container security best practices.
- * Strong understanding of Security and Compliance, e.g., IAM, cloud compliance/auditing/monitoring tools and security frameworks such as CIS benchmarks, NIST standards.
- * Experience in Linux compute system, e.g., file system/schedule system/boot system and essential command with shell.
- * Excellent skills in at least one of following: Python, Ruby, Java, JavaScript, Go, Groovy, Scala, with a focus on secure coding practices.
- * A track record of constantly looking for ways to do things better and an excellent understanding of the mechanism necessary to successfully implement change with a security mindset.
- * A successful track record of delivering complex projects and/or programs, utilizing appropriate techniques and tools to ensure and measure success, as well as making good documentation to record wha
Full description
Some careers have more impact than others.
If you’re looking for a career where you can make a real impression, join HSBC and discover how valued you’ll be.
We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Software Engineering.Business: Group Functions Technology L3
Principal responsibilities
- Own the day-to-day health, uptime, monitoring, and reliability of services and server infrastructure.
- Collaborate on regular UAT/Production release, w.r.t Release Planning/Review/Tag/Release execution and post health-check.
- Participate in architecture and design reviews to provide recommended improvements to development teams to improve the reliability of applications.
- Minimize manual involvement by implementing continuous security improvements that create a secure operating environment, including developing new security tools, dynamically monitoring for vulnerabilities, alerting on security events, and automated self-healing recovery processes.
- Engage in application performance analysis, system tuning and capacity planning.
- Perform root cause analysis to identify issues and implement continuous improvements to prevent future occurrences.
- Capable of presenting analyses and recommendations to leadership or discussing the technical merits of security solutions with engineers and architects.
- Moderate level of technical complexity experience with multiple integrated applications
- Engineer secure solutions on foundation platform using Infrastructure as Code (IaC) methods (e.g., Terraform).
- Ensure compliancy with Operational risk and security standards (E.g. Network, Firewall, OS, Logging, Monitoring, Availability, Resiliency)
- Build and support continuous integration (CI), continuous delivery (CD) and continuous testing activities, integrating security tools and automated security checks into the pipeline (e.g., SAST, DAST, CONT, FOSS).
- Develop and maintain security documentation and procedures.
- Mentor other engineers on security best practices.
- Lead incident response activities for security incidents.
Requirements
- Expert understanding of DevOps principles and Infrastructure as a Code concepts and techniques, including security as code.
- Strong understanding of DevOPS/CI/CD and available tools, including Jenkins, Ansible and security testing tools.
- Experienced in full automation and configuration management with a security-first approach.