Full Description

HSBC Service Delivery (Polska) Sp. z o.o. is HSBC's global finance, operations, risk and technology centre. We use our unique expertise and capabilities to provide specialised services – our people range from technologists transforming the banking experience to operations professionals managing 1.7 trillion payments a year. Our Purpose – Opening up a world of opportunity – explains why we exist. We are bringing together the people, ideas and capital that nurture progress and growth, helping to create a better world – for our customers, our people, our investors, our communities and the planet we all share.

HSBC Corporate and Investment Banking (CIB) is an emerging markets-led and financing-focused business that provides tailored financial solutions to major government, corporate and institutional clients worldwide. The role is within CIB & HBEU Technology - a department of HSBC Technology - providing IT application development and support services to Business and IT teams within CIB & HBEU.In particular, the Tech Tools, Metrics & Controls Team (TMC) falls under the CIB & HBEU. Technology Service Management function, providing development, enhancement and support a number of Tools and integrations used across the CIB & HBEU Technology organisation. We currently invite multi-discipline IT developer professionals with a passion for technology and professionalism to follow a career in the technology industry of HSBC CIB.

What you’ll be doing

• Analyzing, assessing and responding to the security vulnerabilities received as part of Bug Bounty Program.
• Researching and reproducing the security vulnerabilities
• Performing the root cause analysis of the security vulnerabilities.
• Effectively communicating with the external security researchers
• Working closely with the appropriate stakeholders across departments to help them understand the risks, and the track remediation.
• Driving improvements including tooling, automation, and setting up processes
• Help drive the maturity of Bug Bounty Program by continuously improving quality of our services and removing inefficiencies, in line with wider Cybersecurity strategy.
• Advise on vulnerability remediation, control implementation and secure development practices

You’re a great candidate if you have these

• At least 4 years of prior demonstrable hands-on experience in penetration testing.
• Solid understanding of the platform security models for iOS and Android platforms.
• Excellent understanding of platform-specific security risks, common vulnerabilities for mobile applications, common risks in financial applications.
• Practical knowledge of penetration testing of widely understood infrastructure, web and mobile technologies, using manual and automated testing methods.