Structured Data Security Infrastructure DevOps Engineer

Infrastructure DevOps Engineer for Structured Data Security team  

Location & Work Model

• Hybrid work model

• Preferred location: Kraków (6 office visits per month)

• B2B contract

The role holder will work with the Cyber Security Data team to support the delivery global data security and integrate new application builds on cloud into the existing data security framework, and Logging & Monitoring capabilities across cloud environments. 

This role is responsible for ensuring that structured data hosted across AWS, GCP, Azure and AliCloud is appropriately monitored, logged, and integrated into HSBC`s security tooling system, enabling effective risk management, detection, and response.

The tooling specifically used being the Data Security Fabric product from Imperva Thales (formerly known as GBDI - Guardium Big Data Intelligence). This tool uses a cloud based JSON data repository to integrate log data from any datastore.

Database system event logs are captured on Prem via IBM Guardium collectors whilst cloud native databases require collection of logs via Cloud native delivery streams such as AWS Cloudwatch, Azure Eventhub, Google PubSub and AliCloud ASD tooling. The DSF tool connects to each source before ingesting logs into the backend data warehouse for analytical and reporting delivery.

The demands of monitoring such a large and complex environment mean that huge amounts of data are consumed for analysis.

We are looking for a skilled DevOps / InfraDevOps Engineer to design, build, and maintain scalable, secure, and reliable cloud infrastructure. You will work closely with development and QA teams to streamline delivery processes, automate infrastructure, and ensure high system availability.

Role Description:

The Structured Data Cloud Logging and Monitoring SME role-holder is charged with protecting the brand, shareholder value, information and financial assets, managing a team across the globe in the following ways:

• Supporting the delivery and operating Strategy

• Providing key representation for the Engineering function and source of expertise on all issues

• Support the delivery of tooling to implement controls ensuring compliance with Information Security policies and standards globally, including any regulatory requirements

• Collaborate to drive the implementation of the enterprise wide and regional / business level IT Strategy

• Ensure information security requirements are adhered to globally by ensuring effective compliance and measures are in place

• Work closely with the team as the 1st Line Of Defense function. Understand strategy while maintaining visibility of their IT security risk profile, exposures and control effectiveness and to provide robust challenge to the same audience when information security risk appetites are breached

• Drive engagement with all relevant regional and global stakeholders (cyber security colleagues across Strategy and Architecture, Security Shared Services, Security Engineering and business and IT Functions)

Key Experience:  

• Wide range of cyber experience across cyber with specific focus on Structured Data Security engineering

• Experience on Cloud Native solutions and Cloud based data structures on AWS, GCP, Azure and AliCloud

• Experience with structured data, structured data security and database activity monitoring (DAM) 

• Python programming skills for automation, scripting, data processing, and cloud infrastructure tooling.

• Experience working in UNIX/Linux environments and Bash/shell scripting for automation and infrastructure support.

• Strong hands-on experience with AWS services (e.g., EC2, S3, RDS, Lambda, VPC, IAM)

• Proven experience with orchestration tooling and delivery - Terraform for infrastructure provisioning and management

• Solid experience building and maintaining CI/CD pipelines (e.g., GitHub, Jenkins)

• Experience integrating automated testing frameworks into pipelines (unit, integration, end-to-end testing)

• Strong understanding of data formats (JSON), parsing and normalisation techniques

• Proven experience of successful operational management, utilising relevant tools and techniques to ensure consistent delivery

• Understanding of networking concepts and cloud security best practices

• A minimum of 4/5 years Cyber experience would be beneficial

• Experience working in a highly regulated environment 

• Promoted and led best practice in risk and compliance management in a similar organization

• A track record of making strategic business decisions, considering relevant risks, long term implications, commercial realities and the servicing of stakeholders needs

• Typically educated to degree level or equivalent

We offer:

• Stable job in professional team, with the opportunity to work with cutting edge technology/innovative projects

• Exposure to large-scale cloud and data security transformation programmes

• Collaborative environment across international teams,

• Interesting career path in an international organization

• Consistent scope of responsibilities

• Employees’ benefits