Cryptography Specialist

If you're looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Senior Consultant Specialist

Emerging Technology, Innovation and Ventures Department at HSBC is dedicated to analyzing societal, financial, and technological trends that impact economic activity and the financial services industry. By leveraging this knowledge, we create innovative digital opportunities aligned with HSBC's business objectives. Our team of experts is at the forefront of research, innovation, and experimentation, utilizing the latest advancements to develop cutting-edge solutions that benefit our clients and the industry.

In this role, you will:

• 1+ years in PQC and QKD experience and 5+ years in cybersecurity is must.
• Cryptography implementation background is required.
• Embed security controls into automated deployment workflows.
• Conduct security assessments of enterprise applications.
• Perform static/dynamic code analysis and runtime behavior assessments.
• Regularly scan for vulnerabilities and manage remediation.
• Evaluate third-party and open-source components for risk.
• Evaluate and recommend tools and technologies to improve security posture.
• Perform in-depth threat modeling using STRIDE and similar methodologies.
• Use tools like Microsoft Threat Modeling Tool to analyze potential threats.
• Execute pen tests on systems to uncover vulnerabilities.
• Simulate adversarial attacks: data poisoning, evasion, prompt injection, etc.
• Use tools like CleverHans, SecML for adversarial robustness testing.
• Work closely with enterprise teams to fix vulnerabilities and harden models.

To be successful in this role, you should meet the following requirements:

• 5+ years in security engineering, including enterprise.
• Strong Cloud Security and DevSecOps.
• Proven experience in security assessments, threat modeling, and pen testing.
• Solid experience designing secure full-stack application.
• Bachelor's or Master's degree in Computer Science, Cybersecurity, or related.
• Certifications: CISSP, CEH, OSCP.
• Bonus: Specialized AI/ML security certifications or training.
• Advanced proficiency with TensorFlow, PyTorch, and scikit learn; strong Python programming skills.
• Experience implementing adversarial attack and defense techniques (e.g., FGSM, PGD, DeepFool) and integrating robust optimization in model training.
• Experience in identifying and mitigating vulnerabilities, including prompt injection and data poisoning defenses.
• Solid understanding of MLOps tools (Kubeflow, MLflow) and secure CI/CD pipeline practices..
• Knowledge of legal and compliance standards relevant to security and data privacy.
• .

www.hsbc.com/careers

HSBC is committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working, and opportunities to grow within an inclusive and diverse environment. Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by HSBC Software Development India.