Cyber Protection Platforms Engineering Lead

HSBC; Sheffield; On-site; GBP 70,000 - 100,000; Full time

Job summary

HSBC Holdings plc in Sheffield is seeking an experienced security engineering leader to drive secure design and delivery across the bank’s production services and platforms. You will lead enterprise security platforms across cloud, containers, endpoints, identity and exposure management, and coach engineers through security‑first practices.

The role requires strong collaboration with stakeholders to translate risks into practical engineering solutions and to deliver complex programmes in

Qualifications

• Demonstrable security engineering leadership and people management experience.
• Experience designing, rolling out and operating enterprise security platforms across cloud, containers, endpoints, identity and exposure management.
• Hands-on credibility in cloud architecture and application/infrastructure security across public, private or hybrid services.
• Strong programming or scripting ability with secure CI/CD and DevSecOps practices.
• Knowledge of reliability, observability and performance engineering in production services.
• Experience delivering complex programmes, mentoring engineers and collaborating across teams.
• Ability to communicate risks and trade-offs to stakeholders and translate security controls into practical engineering solutions.

Skills

Security engineering leadership

Cloud architecture

DevSecOps / CI‑CD

Stakeholder communication

Coaching engineers

Reliability / observability

Security controls translation

People management

Job description

• Demonstrable practical experience in security engineering or closely related technical roles, including engineering leadership and people management
• Established experience designing, rolling out and operating enterprise security platforms across cloud, containers, endpoints, identity and exposure management
• Proven hands‑on credibility across cloud architecture and application and infrastructure security in public, private or hybrid services
• Strong programming or scripting capability with experience applying secure CI/CD and DevSecOps practices
• Practical knowledge of reliability, observability and performance engineering and how to apply these in production services
• Experience delivering complex programmes, navigating ambiguity and supporting engineers' development through effective coaching and collaboration
• Ability to communicate with stakeholders clearly on risks and trade-offs and translate security controls into practical engineering solutions