Structured Data Security Infrastructure DevOps Engineer

Infrastructure DevOps Engineer for Structured Data Security team Location & Work ModelHybrid work modelPreferred location: Kraków (6 office visits per month)B2B contractThe role holder will work with the Cyber Security Data team to support the delivery global data security and integrate new application builds on cloud into the existing data security framework, and Logging & Monitoring capabilities across cloud environments. This role is responsible for ensuring that structured data hosted across AWS, GCP, Azure and AliCloud is appropriately monitored, logged, and integrated into HSBCs security tooling system, enabling effective risk management, detection, and response.The tooling specifically used being the Data Security Fabric product from Imperva Thales (formerly known as GBDI - Guardium Big Data Intelligence). This tool uses a cloud based JSON data repository to integrate log data from any datastore.Database system event logs are captured on Prem via IBM Guardium collectors whilst cloud native databases require collection of logs via Cloud native delivery streams such as AWS Cloudwatch, Azure Eventhub, Google PubSub and AliCloud ASD tooling. The DSF tool connects to each source before ingesting logs into the backend data warehouse for analytical and reporting delivery.The demands of monitoring such a large and complex environment mean that huge amounts of data are consumed for analysis.We are looking for a skilled DevOps / InfraDevOps Engineer to design, build, and maintain scalable, secure, and reliable cloud infrastructure. You will work closely with development and QA teams to streamline delivery processes, automate infrastructure, and ensure high system availability. Role Description:The Structured Data Cloud Logging and Monitoring SME role-holder is charged with protecting the brand, shareholder value, information and financial assets, managing a team across the globe in the following ways:Supporting the delivery and operating StrategyProviding key representation for the Engineering function and source of expertise on all issuesSupport the delivery of tooling to implement controls ensuring compliance with Information Security policies and standards globally, including any regulatory requirementsCollaborate to drive the implementation of the enterprise wide and regional / business level IT StrategyEnsure information security requirements are adhered to globally by ensuring effective compliance and measures are in placeWork closely with the team as the 1st Line Of Defense function. Understand strategy while maintaining visibility of their IT security risk profile, exposures and control effectiveness and to provide robust challenge to the same audience when information security risk appetites are breachedDrive engagement with all relevant regional and global stakeholders (cyber security colleagues across Strategy and Architecture, Security Shared Services, Security Engineering and business and IT Functions) Key Experience: Wide range of cyber experience across cyber with specific focus on Structured Data Security engineeringExperience on Cloud Native solutions and Cloud based data structures on AWS, GCP, Azure and AliCloudExperience with structured data, structured data security and database activity monitoring (DAM) Python programming skills for automation, scripting, data processing, and cloud infrastructure tooling.Experience working in UNIX/Linux environments and Bash/shell scripting for automation and infrastructure support.Strong hands-on experience with AWS services (e.g., EC2, S3, RDS, Lambda, VPC, IAM)Proven experience with orchestration tooling and delivery - Terraform for infrastructure provisioning and managementSolid experience building and maintaining CI/CD pipelines (e.g., GitHub, Jenkins)Experience integrating automated testing frameworks into pipelines (unit, integration, end-to-end testing)Strong understanding of data formats (JSON), parsing and normalisation techniquesProven experience of successful operational management, utilising relevant tools and techniques to ensure consistent deliveryUnderstanding of networking concepts and cloud security best practicesA minimum of 4/5 years Cyber experience would be beneficialExperience working in a highly regulated environment Promoted and led best practice in risk and compliance management in a similar organizationA track record of making strategic business decisions, considering relevant risks, long term implications, commercial realities and the servicing of stakeholders needsTypically educated to degree level or equivalent We offer:Stable job in professional team, with the opportunity to work with cutting edge technology/innovative projectsExposure to large-scale cloud and data security transformation programmesCollaborative environment across international teams,Interesting career path in an international organizationConsistent scope of responsibilitiesEmployees’ benefits