Global Container Security Product Technical Owner in Sheffield

Job Title: Global Container Security Product Technical Owner

Big Bank Funding. FinTech Thinking.

Our technology teams in the UK work closely with HSBC’s global businesses to help design and build digital services that allow our millions of customers around the world, to bank quickly, simply and securely. We also run and manage our IT infrastructure, data centres and core banking systems that power the world’s leading international bank.

Our multi-disciplined teams include: DevOps engineers, IT architects, front and back end developers, infrastructure specialists, cyber experts, as well as project and programme managers.

Role Description:

The Global Container Security Product Technical Owner will be a key part of the Secure Development team, reporting to the Global Head of Cyber Threat & Controls Assessment and Secure Development. They will, closely collaborate with peers across Cybersecurity and the business development teams to enable the rapid build of secure technology products and services, thereby reducing the risk to HSBC by enabling early identification and remediation of security vulnerabilities.

Responsibilities:

• Technical Product Ownership and Service management for Container security scanning capabilities, as utilised in the SecDevOps lifecycle.
• Defining and driving scanning product vision, strategy/ road map and metrics; balancing requirements around usability, productivity, security and scale to create optimal experiences for engineering application teams.
• Performing continuous capability assessment and driving improvements of the security scanning product efficacy, coverage, quality, false-positive ratio, service processes and procedures.
• Defining and maintaining scanning tool configuration, ruleset and policy and revising as required to minimise false positive ratio.
• Leading and executing the creation, review and maintenance of security scanning quality assurance approach and related documentation.
• Expanding the coverage of security scanning across different container platforms
• Looking at the full end to end lifecycle of a container and ensuring security assurance across the full workflow
• Looking at cloud native solutions and ensuring coverage of cloud with container security scanning
• Planning and executing project roadmaps to; enhance functionality and/or remediate identified security scanning product gaps.

Essential Skillset/Experience:

• Service management / product ownership.
• Experience of working on cloud platforms.
• Experience of working with containers.
• Experience of working with Kubernetes or other container orchestration.
• Experience in DevSecOps including Agile and Waterfall Software Development Life Cycle.
• Experience on integration & automation of various security technologies especially container security scanning within DevOps tooling pipeline (Jenkins, GitHub, Chef, Ansible, Nexus, etc).
• Experience in cybersecurity principles, assessment and triage for security flaws and common vulnerabilities for web and mobile applications.
• Ability to understand and assess both threats and vulnerabilities, articulating these to both technical and business stakeholders.
• An inquisitive approach, always asking how to achieve goals in a smarter and more effective way.
• An ability and interest to learn and experiment with new approaches to vulnerability management, in different contexts, across the amazing scale that HSBC brings.

The role will be based in Sheffield.

Come Power a Business that Defines How to Power the World

HSBC is committed to being an inclusive employer and providing an inclusive and accessible recruitment process for all. We will provide reasonable adjustments to remove any disadvantage to you being considered for this role. We are proud members of the Disability Confident Scheme, and will offer an interview to disabled candidates who meet the minimum criteria for the role. If you would like to receive any information in a different way or would like us to do anything differently to help you apply for our roles, please contact our Recruitment Helpdesk:

Email: hsbc.recruitment@hsbc.com

Telephone: +44 2078328500.