Senior Security Researcher

HSBC Global Services Limited; Sheffield; On-site; GBP 40,000 - 70,000; Full time

Job summary

A leading bank is seeking a cybersecurity professional to join their team in Sheffield. This role involves delivering security research focused on critical bank services, identifying vulnerabilities, and collaborating with various stakeholders. The ideal candidate will have experience in penetration testing and a strong understanding of security systems. The position offers a competitive salary and professional development opportunities.

Benefits

Private healthcare

Enhanced maternity and adoption pay

Contributory pension scheme

Qualifications

• Experience in penetration testing.
• Experience with 0-day discovery and vulnerability disclosure.
• Understanding of Linux, Windows, Google Android, and iOS.

Responsibilities

• Deliver security research projects focused on HSBC critical services.
• Identify previously unknown vulnerabilities and new attack techniques.
• Provide subject matter expertise across global business and functions.
• Develop tools and automate processes to enhance security assessments.

Skills

Penetration testing

Vulnerability discovery

Understanding of operating systems

Software security review techniques

Job description

Social network you want to login/join with:

Join a digital first bank that’s powered by people.

Our technology team builds innovative digital solutions rapidly and at scale to deliver the next generation of banking services for our customers around the world.

In our cybersecurity team, you’ll be helping to safeguard the financial system on which millions of people depend.

You’ll be making banking more secure by designing, implementing, and operating controls to manage cybersecurity risk. You’ll help define HSBC Group cybersecurity standards, deliver Global Security Operations and Threat Management services, provide round-the-clock monitoring and security incident response services, and oversee Network/Application/Infrastructure Security. The work you do will provide assurance of the adequacy and effectiveness of security controls to Business Risk Owners.

Offensive Security provides an independent challenge to HSBC’s cybersecurity posture by bringing the attacker’s mindset to find and exploit vulnerabilities and to simulate real-world attacks. Through this, OffSec discovers weaknesses across people, process, and technology, enabling the firm to better understand its exposure to cybersecurity attacks and to drive a proactive approach to protect itself and to manage risk more effectively.

The Security Research team, within the Global Offensive Security function, provides a specialist approach to assessing the security of systems and technology, identifying previously unknown vulnerabilities and new attack techniques.

As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

In this role, you will:

• Deliver security research projects focused on HSBC critical services, ensuring that design, quality, and implementation of controls do not expose the bank to a significant level of risk.
• Identify previously unknown vulnerabilities and new attack techniques.
• Work with key stakeholders to proactively reduce cybersecurity risks and improve HSBC’s security risk posture within the business risk appetite.
• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.
• Engage with relevant programmes critical to the bank.
• Understand the financial services industry security and threat landscape.
• Engage with diverse stakeholders to achieve OffSec objectives, including Business and Functions, Cybersecurity leads, Head of Cybersecurity functions, and Control Owners.
• Drive performance, compliance, and security to achieve excellence.
• Develop tools and automate processes to enhance security assessments.
• Collaborate with specialist technology functions such as Cybersecurity Technology, Cybersecurity Operations, and Security Architecture.
• Maintain a strong teamwork attitude with the global OffSec team and all Global Businesses and Functions.
• Establish and maintain productive relationships across the bank in a client-facing role.
• Adhere to operational controls as outlined in procedures and policies to ensure risks are managed.
• Establish operational controls within tools and systems used.
• Identify new project opportunities and demonstrate innovative thinking.
• Develop and maintain excellent relationships with clients and stakeholders, receiving positive feedback.
• Be sensitive to stakeholders' concerns and situations.
• Analyze and interpret the evolving security threat landscape.
• Use innovation in security to address customer and stakeholder needs.

To be successful in this role, you should meet the following requirements:

• Experience in penetration testing.
• Experience with 0-day discovery and vulnerability disclosure.
• Understanding of analysis of common operating systems, such as Linux, Windows, Google Android, and iOS.
• Experience in third-party vulnerability disclosure.
• Experience with black box software security review techniques, including fuzzing and reverse engineering.

This role is based in Sheffield.

Opening up a world of opportunity

We value diverse perspectives and are committed to creating inclusive workplaces. HSBC is dedicated to removing barriers and ensuring careers are accessible and inclusive for everyone. We are proud to be a Disability Confident Leader and will offer interviews to candidates with disabilities, long-term conditions, or neurodivergence who meet the minimum criteria for the role.

If you need accommodations or changes during the recruitment process, please contact our Recruitment Helpdesk: