(Cybersecurity) Vulnerability Capture Engineer

Brief overview of the business areas

Global Cybersecurity is responsible for enabling businesses and functions to manage their information, technology and cybersecurity risks by ensuring these are well-understood, and that controls used the manage such events are defined, assessed and implemented appropriately. Cybersecurity predominantly deliver this via objective, independent, professional and specialized subject matter experts. The role forms part of the 1LoD in relation to the risk management framework.

The Cybersecurity Assessment and Testing (CSAT) function, part of Global Cybersecurity, is accountable for Vulnerability Management, Secure Development (inc. DevSecOps), Threat and Controls Assessment (inc. threat modelling) and Third Party Security Assessment. The function drives the identification, capture, assessment, testing/verification and ultimately the remediation of security defects, gaps and vulnerabilities across HSBC’s estate in concert with business and technology teams – on-premise, within the Cloud and for those resulting from 3rd party engagements.

What you will be doing

The Vulnerability Capture Engineer will be responsible for performing vulnerability scanning and assessments to protect the confidentiality, integrity and availability of information assets using a risk-based approach.

Additionally, they will need to closely collaborate with peers across; assessment and reporting, remediation, and Cybersecurity business and regional leads, enabling effective end-to-end vulnerability management.

This role reports into the Global Head of Vulnerability Capture.