Cybersecurity Incident Response / Incident Response Lead Analyst

Some careers shine brighter than others.

If you’re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.

HSBC is one of the largest banking and financial services organisations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realise their ambitions.

We are currently seeking an experienced professional to join our team in the role of Incident Responses Lead Analyst

Why HSBC

HSBC is one of the largest banking and financial services organisations in the world. Guided by our purpose of opening up a world of opportunity, our ambition is to become the world’s most trusted bank globally, putting customers at the heart of everything we do.

The Opportunity

Join Global Cybersecurity Operations (GCO) within HSBC’s Cybersecurity function, supporting the detection and response to information and cybersecurity threats across HSBC’s global assets and estate. This role focuses on technical incident response and forensic investigations across the globe, helping protect HSBC’s information assets and services by identifying threats quickly and reducing further risk. You’ll work closely with teams across Monitoring and Threat Detection, Cyber Intelligence and Threat Analysis, Cyber Engineering, Service Reliability Engineering, Vulnerability Management and stakeholders across HSBC businesses and functions worldwide. Success means running high-quality investigations, turning findings into practical improvements and strengthening incident response playbooks, detection use cases and platform capabilities. You’ll also contribute to building capability across the function through training and clear, actionable communication to technical and non-technical audiences.

What You'll Be Doing

Perform technical and forensic investigations into cybersecurity events across HSBC’s global estate Identify cyber threats quickly and take action to minimise further risk to information assets and services Deliver post-incident reviews that assess control effectiveness and translate findings into improvements with accountable owners Provide forensic services across evidence collection, processing, preservation, analysis and presentation Maintain incident response playbooks and support development and implementation of new detection use cases Define and document detailed processes and procedures for responding to cybersecurity events Contribute to enhancing security platforms and advancing incident response and forensic capabilities including automation and orchestration Develop capability across the team through training and knowledge sharing in incident response and forensics

What we're looking for

Bring extensive incident response or computer forensics experience in an enterprise-scale organisation ideally in financial services or another regulated sector Apply deep knowledge of cybersecurity technologies including IDS, IPS, host-based controls, anti-malware, firewalls, proxies and managed security services Use strong expertise in enterprise infrastructure and tooling across Windows, Linux, infrastructure management and networking hardware Demonstrate hands-on capability with incident response and forensic tools such as EnCase, Forensic Toolkit (FTK), Sleuth Kit, Kali Linux, IDA Pro and SANS Investigative Forensics Toolkit Interpret attacker tactics, techniques and procedures and respond to advanced methodologies across corporate environments and external attack infrastructure Communicate complex technical issues clearly and produce reports for non-technical audiences and forensic analysis reports that document findings, processes and techniques Operate effectively in time-critical incident scenarios including crisis management, response frameworks and communications Hold relevant cybersecurity or forensics certifications such as CISSP, CEH, C|CISO, GIAC or equivalent certification, or bring equivalent demonstrable experience

Advancing global cyber defence

This is a chance to work at the centre of HSBC’s response to cyber threats, protecting services and information assets that matter to customers and colleagues every day. The role offers breadth across investigations, forensics, platform enhancement and continuous improvement, with scope to shape how the function evolves its detection and response capabilities. If you want your work to translate directly into stronger controls, clearer playbooks and faster, better-informed response outcomes we’d like to hear from you.

You’ll achieve more when you join HSBC.

www.hsbc.com/careers

HSBC is an equal opportunity employer committed to building a culture where all employees are valued, respected and opinions count. We take pride in providing a workplace that fosters continuous professional development, flexible working and, opportunities to grow within an inclusive and diverse environment. We encourage applications from all suitably qualified persons irrespective of, but not limited to, their gender or genetic information, sexual orientation, ethnicity, religion, social status, medical care leave requirements, political affiliation, people with disabilities, color, national origin, veteran status, etc., We consider all applications based on merit and suitability to the role.”

Personal data held by the Bank relating to employment applications will be used in accordance with our Privacy Statement, which is available on our website.

Issued by – HSBC Software Development India.