3 days ago
Guangzhou, ChinaStaff+
Responsibilities
- Own service and server infrastructure health, uptime, monitoring, reliability, performance analysis, system tuning, and capacity planning.
- Collaborate on UAT and production release planning, review, tagging, execution, and post-release health checks.
- Participate in architecture and design reviews and recommend reliability improvements to development teams.
- Develop security tools, vulnerability monitoring, security-event alerting, automated security checks, and self-healing recovery processes.
- Engineer secure cloud and foundation-platform solutions using Infrastructure as Code methods such as Terraform.
- Build and support CI, CD, and continuous testing activities, including SAST, DAST, CONT, and FOSS security checks.
- Perform root-cause analysis, lead security incident response, and implement preventive improvements.
- Maintain security documentation and procedures and mentor engineers on security best practices.
- Collaborate with application teams, cross-functional IT, and global and local IT teams in an agile DevOps pod environment.
- Ensure solutions comply with operational risk, security, regulatory, design-pattern, and approved security standards.
Requirements
- Expert understanding of DevOps principles, Infrastructure as Code, and security as code.
- Strong understanding of DevOps, CI/CD, Jenkins, Ansible, and security testing tools.
- Experience with full automation and configuration management using a security-first approach.
- Experience building and configuring cloud services, ideally in GCP or Azure, across compute, storage, networking, and security.
- Experience with containerized solutions such as Docker and GKE and with container security best practices.
- Strong understanding of IAM, cloud compliance, auditing and monitoring tools, CIS benchmarks, NIST standards, and security and compliance practices.
- Experience with Linux compute systems, including file systems, scheduling, boot systems, shell commands, and administration.
- Excellent skills in at least one of Python, Ruby, Java, JavaScript, Go, Groovy, or Scala, with secure coding experience.
- Track record of delivering complex projects or programs, implementing change, documenting outcomes, and improving operational effectiveness.
- Strong leadership, teamwork, stakeholder-management, customer-focus, risk-management, and regulatory-compliance skills.
Benefits
- HSBC offers continuous professional development, flexible working, opportunities for growth, and an inclusive and diverse workplace.
- HSBC is an equal opportunity employer and considers applications based on merit and suitability.
Tech Stack
About HSBC
HSBC is a global bank that provides retail, commercial and investment banking, payments, and wealth management to individuals, SMEs, and multinationals. It earns fees, interest income, and trading revenues through branches and digital platforms across major markets. Headquartered in London, it serves over 40 million customers in 58 countries and is listed in London, Hong Kong, New York, and Bermuda.