Crew Lead (GCO)/Cybersecurity

Job Description

The health and safety of our employees and candidates is very important to us. Due to the current situation related to the Novel Coronavirus (2019-nCoV), we?re leveraging our digital capabilities to ensure we can continue to recruit top talent at the HSBC Group. As your application progresses, you may be asked to use one of our digital tools to help you through your recruitment journey. If so, one of our Resourcing colleagues will explain how our video-interviewing technology will be used throughout the recruitment process and will be on hand to answer any questions you might have.Some careers brighter than others.If you?re looking for a career that will help you stand out, join HSBC and fulfil your potential. Whether you want a career that could take you to the top, or simply take you in an exciting new direction, HSBC offers opportunities, support and rewards that will take you further.HSBC is one of the largest banking and financial services organizations in the world, with operations in 64 countries and territories. We aim to be where the growth is, enabling businesses to thrive and economies to prosper, and, ultimately, helping people to fulfil their hopes and realize their ambitions.We are currently seeking an experienced professional to join our team in the role of Crew Lead.Job Profile:

• Managing and maintaining a highly skilled, efficient and effective local team of Cybersecurity Analysts in achievement of their responsibilities, which include:
• Monitoring the entire global HSBC technology and information estate for new attacks and log them to appropriate systems.
• Triaging potentially malicious events to determine severity and criticality of the event.
• Responding to alerts from the various monitoring/detection systems and platforms within defined SLAs.
• Following detailed processes and procedures to analyse, respond to and/or escalate cyber security incidents.
• Supporting cyber security incidents through to eradication and feedback lessons learned, in to improved cyber resilience.
• Analysing network traffic using a variety of analysis tools.
• Monitoring security appliance health and perform basic troubleshooting of security devices; notify security engineering as necessary for malfunctioning equipment.
• Analysing malicious artefacts obtained from network monitoring with a focus on generation of threat intelligence and service improvement.
• Identifying and developing new ideas to enhance our detection capability (Use cases) and mitigations (Playbooks) across the security platforms.
• Supporting handovers to other teams and countries at the start and end of the working shift.
• Performance management and development of the Cybersecurity Analysts.
• Collaboration with other local and global Crew Leads and Watch Commanders to ensure co-ordination of workload and continuous 24x7 cybersecurity operations service provision.
• Reviewing and validating new Use Cases and Playbooks created by Cybersecurity Analysts.
• Ensuring a comprehensive and smooth hand-over between the global teams as shifts end and begin.
• Identification of processes that can be automated and orchestrated to ensure maximum efficiency of GCO resources.
• Promoting a ?self-critical? and continuous assessment and improvement culture whereby identification of weaknesses in the bank?s control plane (people, process and technology) are brought to light and addressed in an effective and timely manner.

Keyskills :