Senior Security Researcher

HSBC Holdings plc; Sheffield; On-site; GBP 70,000 - 110,000; Full time

Job summary

HSBC Holdings plc is seeking a proactive security research lead to direct and execute CROS security research projects across HSBC's critical services. You will perform hands-on security research on software and hardware technologies and work cross-functionally to deliver scalable security solutions.

The role focuses on reducing risk, applying AI for security and developing automated tools to enhance assessment and testing capabilities.

Qualifications

• 0-day discovery and vulnerability disclosure.
• Source code review.
• Hardware hacking.
• Wireless technology.
• Penetration testing.
• AI LLM / GenAI Security assessments (Security for AI).
• AI in the discovery / validation of 0-days (AI for Security).

Responsibilities

• Lead, manage and deliver CROS security research projects across HSBC's technology stack.
• Perform hands-on security research on software and hardware essential to HSBC services.
• Collaborate cross-functionally to develop scalable security solutions for HSBC.
• Provide SME guidance to global stakeholders to reduce cybersecurity risks.
• Develop tools and automation to enhance security assessment and testing.
• Explore AI for Security to address complex cyber assessment challenges.

Skills

0-day discovery

Source code review

Hardware hacking

Wireless technology

Penetration testing

AI LLM / GenAI Security assessments

AI in discovery / validation of 0-days

Job description

• Be responsible for leading, managing and delivering CROS security research projects, on a wide range of technologies to ensure that HSBC is well positioned against a variety of Cybersecurity related advanced attack scenarios.
• Will be required perform hands on security research on software and hardware technology, critical to HSBC’s services.
• You will work cross-functionally to develop solutions that improves the delivery of CROS services.
• The successful candidate will have a proven track record in conducting security research and developing innovative scalable solutions.
• Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and to improve the security risk posture of HSBC within the business risk appetite.
• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.
• Achieve excellence by driving performance, compliance and security.
• Identifying previously unknown vulnerabilities and new attack techniques.
• Develop tools and automation of processes to enhance security assessment.
• This might include experimenting with AI (AI for Security) to solve complex problems related to Cyber Assessment and Testing.
• Deliver security research projects focused on HSBC critical services and projects to ensure that design, quality and implementation of controls do not expose the bank to a significant level of risk.

To be successful in this role you should meet the following requirements:

• 0-day discovery and vulnerability disclosure.
• Source code review.
• Hardware hacking.
• Wireless technology.
• Penetration testing.
• AI LLM / GenAI Security assessments (Security for AI).
• AI in the discovery / validation of 0-days (AI for Security).

Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces - no matter their gender, ethnicity, disability, religion, sexual orientation, socio-economic background or age. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. We take pride in being a Disability Confident Leader and will offer an interview to people with disabilities, long term conditions or neurodivergent candidates who meet the minimum criteria for the role.