Some careers shine brighter than others.
If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.
HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.
We are currently seeking an experienced professional to join our team in the role of Sr. Associate Director, Software Engineering
Global Cybersecurity is responsible for enabling businesses and functions to manage their information, technology and cybersecurity risks by ensuring these are well-understood, and that controls used the manage such events are defined, assessed and implemented appropriately. Cybersecurity predominantly deliver this via objective, independent, professional and specialized subject matter experts. The role forms part of the first line of defence in relation to the risk management framework.
The Cybersecurity Assessment and Testing (CSAT) function, part of Global Cybersecurity, is accountable for Vulnerability Management, Secure Development (inc. DevSecOps), Threat and Controls Assessment (inc. threat modelling) and Third Party Security Assessment. The function drives the identification, capture, assessment, testing/verification and ultimately the remediation of security defects, gaps and vulnerabilities across HSBC’s estate in conjunction with business and technology teams – on-premise, within the Cloud and for those resulting from third party engagements.
In this role, you will:
- You’ll lead the technical delivery of full stack services and integrations used by internal cybersecurity stakeholders—covering REST APIs, data pipelines/ETL, CI/CD, and service operability—using HSBC’s CSAT engineering approach: Python-first, microservice principles, containers, and DevSecOps. You’ll also shape “how we do things” within the team through pragmatic standards, patterns and automation—borrowing the best elements of a principal engineering mindset without being the enterprise-wide authority.
- The role will partner heavily with cybersecurity experts across CSAT to deliver solutions that help keep the bank secure. Such solutions can include the integration and automation of third-party scanning tools such that they periodically detect for vulnerabilities across the estate, and report these back to relevant stakeholders. Other solutions can include building in-house scanning capabilities that look for certain types of security weaknesses.
- As a Senior Tech Lead, your responsibilities will include the following: Technical delivery & team leadership- Lead technical design and delivery for a pod/squad in an agile/DevSecOps environment, partnering closely with the Product Owners and Global Head of Engineering.
- Provide day-to-day technical direction: break down work, define technical approaches, unblock engineers, and ensure quality outcomes. Remain hands-on in development (expected to contribute code regularly) across backend, pipelines and automation.
- Solution design (secure-by-design): Design and evolve loosely coupled microservices and internal platforms supporting cyber use-cases such as: automation/integration of third-party scanning tools, in-house scanning capabilities, workflow and reporting services for vulnerability management and assurance, Apply and coach modern patterns aligned to the existing stack, including microservices and event based systems where appropriate.
- DevSecOps, reliability & automation : Build and improve CI/CD pipelines (e.g., Jenkins, GitHub) to reduce friction and increase reliability. Drive a strong operability culture: L2/L3 troubleshooting, incident hygiene, release discipline, technical documentation, and measurable service health. Drive the remediation of problem actions following incidents. Drive the team to deliver high quality observability in everything they build, from the very beginning.
- AI solutions & AI-assisted engineering: Build AI-enabled features/services (e.g., triage, classification, summarisation, anomaly detection, prioritisation) where they measurably improve cyber outcomes. Champion responsible use of AI coding tools (e.g., pair-programming assistants) with guardrails: secure coding, data handling, code review expectations, and testing standards. Introduce repeatable team practices to accelerate delivery with AI (prompt patterns, evaluation approaches, secure usage guidance, and CI checks).
- Engineering excellence (team-level) : Establish pragmatic standards and patterns for your squad: code quality, testing, branching strategy, service templates, reusable libraries.Mentor engineers through pairing, design reviews and peer reviews; lead by example.
To be successful , you need to have
- Strong, proven experience delivering production services in Python, with modern web frameworks (FastAPI preferred, Flask/Django also relevant). Demonstrable experience designing and delivering REST API services, integrations to third-party products, and internal end-user services.
- Solid experience with microservice architecture and practical application of distributed systems patterns. Strong hands-on experience with Docker and Kubernetes deployments. Strong CI/CD engineering experience (e.g., Jenkins, GitLab) including automated tests and release pipelines.
- Strong Linux administration and core networking knowledge. Proficiency with Git and branching strategies (e.g., GitFlow or trunk-based). Strong SQL skills (complex queries). Confidence leading technical delivery: making design decisions, guiding others, and raising engineering standards through reviews and mentoring.
- Experience building AI-enabled software (e.g., using ML/NLP services, LLM-based components, or applied AI workflows) and using AI coding tools in a professional engineering environment with quality controls.
- Working style & behaviours : Clear communicator who can translate between engineers and non-engineers in a global team. Comfortable moving at pace while operating safely in a highly regulated environment. Inclusive leader who supports different perspectives and helps the team succeed together.
- Great to have (i.e. what would really help you standout): Cybersecurity engineering experience (e.g., SAST/DAST integration, pen testing concepts, fuzzing, threat detection/exploitation techniques).
- Cloud platform delivery experience (AWS/Azure/GCP), Terraform, and operational monitoring (e.g., Prometheus) and/or service mesh. Strong front-end experience (e.g., React) beyond baseline HTML/CSS/JavaScript.
- Experience with relational and non-relational databases (e.g., Postgres, MSSQL, MongoDB) including performance tuning. Experience with message queues (e.g., Kafka, RabbitMQ).
You’ll achieve more when you join HSBC.
HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.
Issued by – HSBC Software Development India