Head of AppSec

HSBC
Hyderabad
Workplace: OnsiteFull timeFunction: Administration & Executive AssistanceEducation: bachelorsSkills: ["Collaboration","Stakeholder management","Pragmatic risk mindset","Executive communication","Mentoring"]

Lead HSBC’s global application security (AppSec) transformation across hybrid, on-prem, and cloud-native estates. Build a scalable DevSecOps shift-left model integrated into continuous delivery pipelines, remediate tech debt with risk-based strategy, and unify Application Security Testing (AST) capabilities with low-noise signal. Orchestrate cross-functional alignment across Cyber, CTO/CIO, and CRO/GRC to embed security into SDLC, translate vulnerability data into executive risk metrics, and strengthen third-party and open-source security controls.

Loading

Loading job details...

Preparing the role view and application actions.

FursaFursa
HSBC
HSBC
2 days ago

Head of AppSec

✓ Verified Job

Canonical indexed version, validated from employer's careers page.

Source: Company careers pageValidated by: Fursa AI
Last checked: 14 hours agoStatus: Live

Job Summary

Lead HSBC’s global application security (AppSec) transformation across hybrid, on-prem, and cloud-native estates. Build a scalable DevSecOps shift-left model integrated into continuous delivery pipelines, remediate tech debt with risk-based strategy, and unify Application Security Testing (AST) capabilities with low-noise signal. Orchestrate cross-functional alignment across Cyber, CTO/CIO, and CRO/GRC to embed security into SDLC, translate vulnerability data into executive risk metrics, and strengthen third-party and open-source security controls.
Location: Hyderabad
Workplace: Onsite
Employment Type: Full time
Job Function: Administration & Executive Assistance
Seniority: Sr. Director level

Key Responsibilities

  • •Transform HSBC’s global AppSec function to secure a hybrid technology estate while addressing enterprise tech debt.
  • •Evolve application security from gatekeeping to a developer-empowered DevSecOps approach integrated into continuous delivery pipelines.
  • •Define and implement unified Application Security Testing (AST) capabilities (SAST, DAST, SCA, IAST) and secrets management with high signal-to-noise.
  • •Lead cross-functional orchestration across Cyber, CTO/CIO, and CRO/GRC to embed security into the software delivery lifecycle and drive accountability globally.
  • •Ensure multi-jurisdictional compliance (e.g., PCI-DSS, GDPR, data sovereignty), translate vulnerability data into executive risk metrics, and strengthen third-party/open-source risk controls.

Key Requirements

  • •Hands-on background in software engineering or secure architecture across legacy on-prem (e.g., mainframe, monoliths) and modern cloud environments.
  • •Proven ability to scale modern AppSec tooling and automated vulnerability orchestration pipelines, including API security gateways and CNAPP.
  • •Strong threat modeling expertise using methods such as STRIDE and PASTA for complex banking applications.
  • •Leadership experience in a highly regulated, matrixed enterprise, with ability to translate security metrics for executive stakeholders and maintain technical credibility.
  • •Experience building, mentoring, and inspiring globally distributed, high-performing engineering and security teams.
Education:Bachelor's in Computer Science, Cybersecurity, Information Technology, or a related field
Skills:CollaborationStakeholder managementPragmatic risk mindsetExecutive communicationMentoring
Certifications:CISSPCISMCSSLPAWS Security CertificationsAzure Security Certifications
Tech Stack:AWSAzureGCPKubernetesMicroservicesMainframeSASTDASTSCAIASTSecrets ManagementAPI security gatewaysCNAPPDevSecOpsContinuous delivery pipelinesSDLCSTRIDEPASTAPCI-DSSGDPR

Company Brief

HSBC
Global banking and financial services organisation offering retail, commercial, corporate and investment banking, wealth management, and global markets services across Europe, Asia, the Americas and the Middle East.
Industry: Banking
Company Size: Enterprise (1,001+ employees)
Revenue: USD 1B+
Growth: Public Company
Valuation: Public Company (Market Cap in USD)
Funding: IPO / Publicly Listed
Headquarters: London, United Kingdom
Founded: 1865
Glassdoor
Glassdoor: 3.6
WebsiteLinkedIn