Be at the heart of actionFly remote-controlled drones into enemy territory to gather vital information.

Apply Now

Lead Security Solution Architect

HSBC Global Services Limited
Edinburgh
7 months ago
Applications closed

Related Jobs

View all jobs

Lead Solution Architect

Security Architect

Chief Enterprise Architect

Solution Architect - IAM platform

Security Architect

Azure Solutions Architect

Join a digital first bank that’s powered by people.

Our technology team builds innovative digital solutions rapidly and at scale to deliver the next generation of banking services for our customers around the world.

You’ll have an impact on bringing digital-first banking to our customers by defining the future state architecture vision and strategies for our Global Businesses and Global Functions.

You’ll be developing business, data, software, and integration architecture standards to manage processes, systems, and technology complexity across the HSBC Group. Through dynamic, agile collaboration you’ll work closely with business partners to translate their requirements into integrated solutions that can be deployed globally using consistent service patterns for ease of deployment, support, and enhancement.

As an HSBC employee in the UK, you will have access to tailored professional development opportunities and a competitive pay and benefits package. This includes private healthcare for all UK-based employees, enhanced maternity and adoption pay and support when you return to work, and a contributory pension scheme with a generous employer contribution.

In this role you will:

• Support project teams in designing secure architectures for environments and infrastructure
• Identify and gather project-specific requirements, and embed them into Azure environments and security control design
• Collaborate across all organizations in HSBC to identify, deliver, and document the required artifacts to enable movement of applications and data to the cloud, including strategy, target state, technical roadmaps, position statements, concepts, and logical specifications
• Provide a detailed understanding of cloud security and cloud infrastructure services, threat landscape and attack scenario’s, risks
Hands-on, influence decision makers, and work collaboratively to guide the developers, engineers and architects towards the desired target state.
Should possess significant breadth across other disciplines (e.g., enterprise security architecture, compute services, storage, large-scale networking, virtualization, data center, integration architecture (API), orchestration technologies (Kubernetes, Docker, open stack), systems resiliency, service support, Secure application development lifecycle management (DevSecOps), and service delivery)
• Lead through influence, communicate effectively through clarity of thought and demonstrated understanding of business and technical requirements

 

To be successful in this role you should meet the following requirements:

• Cloud security architecture experience on Azure (required, advanced level);
• Deep knowledge of broader Microsoft technology portfolio and solutions;
• Cloud security architecture experience on AWS and GCP (preferred);
• Increasing responsibility architecting, positioning and delivering cloud/internet facing applications;
• Ability to produce hardened configuration standards for cloud services;
• Threat modeling experience;
• Preferred experience with one or more general purpose programming languages including but not limited to: PowerShell scripting, Java, C/C++, Python, JavaScript and understanding of software vulnerabilities;
• Hands on experience with ARM templates and Terraform;
• Excellent command of Cybersecurity organization practices, operations risk management processes, principles, architectural requirements, engineering threats and vulnerabilities, including incident response methodologies;
• Keen understanding of national and international laws, regulations, policies and ethics related to financial industry cybersecurity;

This role is based in Sheffield, Birmingham or Edinburgh .

Opening up a world of opportunity
 
Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces. Our recruitment processes are accessible to everyone -  no matter their gender, ethnicity, disability, religion, sexual orientation, or age.

We take pride in being part of the Disability Confident Scheme. This helps make sure you can be interviewed fairly if you have a disability, long term health condition, or are neurodiverse.

If you’d like to apply for one of our roles and need adjustments made, please get in touch with our Recruitment Helpdesk:

Email:
Telephone:

 

Being open to different points of view is important for our business and the communities we serve. At HSBC, we’re dedicated to creating diverse and inclusive workplaces - no matter their gender, ethnicity, disability, religion, sexual orientation, or age. We are committed to removing barriers and ensuring careers at HSBC are inclusive and accessible for everyone to be at their best. We take pride in being a Disability Confident Leader and will offer an interview to people with disabilities, long term conditions or neurodivergent candidates who meet the minimum criteria for the role.

 

If you have a need that requires accommodations or changes during the recruitment process, please get in touch with our Recruitment Helpdesk:

Email:

Telephone:

Subscribe to Future Tech Insights for the latest jobs & insights, direct to your inbox.

By subscribing, you agree to our privacy policy and terms of service.

Industry Insights

Discover insightful articles, industry insights, expert tips, and curated resources.

Cyber Security Recruitment Trends 2025 (UK): What Job Seekers Must Know About Today’s Hiring Process

Summary: UK cyber security hiring has shifted from title‑led CV screens to capability‑driven assessments that emphasise incident readiness, cloud & identity security, detection engineering, governance/risk/compliance (GRC), measurable MTTR/coverage gains & secure‑by‑default engineering. This guide explains what’s changed, what to expect in interviews, & how to prepare—especially for SOC analysts, detection engineers, blue/purple teamers, penetration testers, cloud security engineers, DFIR, AppSec, GRC & security architecture. Who this is for: SOC & detection engineers, security operations leads, DFIR analysts, penetration testers/red teamers, purple teamers, AppSec/DevSecOps engineers, security architects, cloud security engineers, identity/IAM engineers, vulnerability managers, GRC/compliance specialists, product security & security programme managers targeting roles in the UK.

Why Cyber Security Careers in the UK Are Becoming More Multidisciplinary

Cyber security used to be viewed primarily as a technical discipline: firewalls, encryption, intrusion detection, penetration testing. In the UK today, it’s far broader. Organisations now face complex legal frameworks, ethical dilemmas, human-behaviour risks, communication challenges & usability hurdles. This shift means cyber security careers are becoming more multidisciplinary. From protecting NHS patient records to defending financial services, securing supply chains & safeguarding national infrastructure, cyber security now touches every sector. Employers increasingly want professionals who understand law, ethics, psychology, linguistics & design alongside traditional technical skills. In this article, we’ll explore why UK cyber security careers are expanding in this way, how these five disciplines shape the profession, and what job-seekers & employers need to know to thrive in this new landscape.

Cyber Security Team Structures Explained: Who Does What in a Modern Cyber Security Department

Cyber security has become a top priority for UK organisations of all sizes. From small businesses to financial institutions, healthcare providers, and government bodies, the risk of cyber attack is now a constant concern. Threats are more sophisticated, regulations more demanding, and customers more aware of data privacy than ever before. But defending against cyber threats isn’t simply about having the right tools — it’s about having the right team. A modern cyber security department relies on clearly defined roles and responsibilities to ensure that defences are proactive, incidents are managed swiftly, and compliance is maintained. This article explains the structure of a modern cyber security team, the roles you’ll typically find within it, how they collaborate, and what skills, qualifications, and salaries are expected in the UK job market.