The Security Engineer (Z scaler & Deception) will be a member of the Global Cybersecurity Core Engineering team, responsible for engineering and operating global security controls that protect users, applications and data across the enterprise. The role prioritizes Z scaler (ZIA/ZPA and related capabilities) and supports deception controls to improve detection and response outcomes. This role will partner heavily with IT Infrastructure Delivery (ITID) and support the end-to-end secure deployment of security technologies across the firm.

The role, will be accountable for the following:

- Define and maintain the current-state baseline and target posture for Z scaler secure access and deception controls.
- Engineer, deploy and operate Z scaler ZIA/ZPA (policies, forwarding/PAC strategy, Client Connector, segmentation/least privilege).
- Integrate Z scaler with enterprise identity services (SSO, SAML/OIDC, MFA, directory services) and ensure identity-aware policy alignment.
- Defining metrics and methodologies to measure domain performance and control effectiveness when applying new technologies
- Ensure effective monitoring and operationalization of Z scaler telemetry through SIEM/SOAR, supporting incident triage and investigations.
- Design, deploy and maintain deception assets (decoys, lures, honeytokens) and integrate alerts into SOC workflows and runbooks.
- Operating a first line of defense to ensure compliance with IT requirements
- Partner with ITID, Network, IAM, EUC, Cloud and SOC/IR teams to deliver secure, resilient services globally.
- Provide subject matter expertise, documentation and vendor engagement to support capability uplift and continuous improvement.
- Collaborating with various layers of management across Cybersecurity and other IT teams to develop solutions that protect the organization.

Principal Accountabilities: key activities and decision making areas

Typical Targets and Measures

Impact on the Business/Function

- Business aligned - Ensuring any decisions, services and technology is delivered and runs in a compliant, effective manner and delivers appropriate benefit to the business.
- Business Enablement Provide technologies that better help the business grow and develop. Ensure that the business requirements are fully understood whilst ensuring the HSBC Security vision is delivered in live with business expectations.




- Business Support - provide advice, guidance and support to the business
- Risk Reduction – Work with IT and Business stakeholders to proactively deploy and build out technology solutions to reduce risk while acting within overall business risk appetite (threat prevention, data protection, access segmentation and high-fidelity detection).
- Business requirements are fully understood and considered.
- Decisions are based on informed information provided by the business and their risk appetite.
- Support regulatory and legislative compliance through appropriate policy enforcement, logging and evidence.
- Risk management and reduction in line with business risk appetite and agreed control objectives.
- Measurable improvements in outcomes.

Customers / Stakeholders

- Customer focus - Support a customer-centered culture, championing activities encouraging outstanding customer advocacy. Proactively seek opportunities to maximize secure access controls and detection outcomes to improve business operations and resilience.
- Stakeholder Relationships - Support key relationships in global cyber security and local IT. Cultivate strong relationships with organizationally important global and local stakeholders with a tailored approach (Network, IAM, EUC, Cloud, SOC/IR, application owners, platform teams).
- Understanding markets and customers. - Understand the financial services threat landscape and the role of Zero Trust access and deception controls in protecting customers and the bank.
- Makes commercial and risk-based decisions in relation to cyber security and protecting the bank and our customers.
- Promotes the most appropriate security demonstrating integrity in the decision.
- Demonstrates sensitivity to the realities and concerns of stakeholders’ situations (availability, performance, change constraints).
- Analyses and interprets evolving threats; adapts Z scaler policies and deception use-cases accordingly.




- Uses innovation in secure access and detection engineering to address the needs of customers and stakeholders (building trust).

Leadership & Teamwork

- Promote collaboration with relevant functions (IT, Risk, etc). Grow local staff in the global IT Security function.
- Create a collaborative environment within the team, and externally with other teams (such as IT, ISR, Audit, etc).
- Work with Integrity and always with the business in mind.
- Share reusable patterns (policy templates, reference architectures, automation modules, SOC runbooks).
- Creates and promotes opportunities for networking, bringing influential people together
- Identifies and builds relationships with key contacts and influencers (internally and externally) in order to enhance business and stakeholder outcomes
- Demonstrates coaching and knowledge transfer; improves team capability and delivery throughput.

Operational Effectiveness & Control:

- Lead the continuing development, implementation and improvement of the processes, structures, capabilities, capacity and infrastructure needed to deliver agreed plans and targets. Collaborate with colleagues to maximize end-to-end integration, effectiveness and efficiency.
- Manage impacts of risk and control frameworks. Track and remediate any issue, finding or recommendation. Contribute when required to global and regional audits.
- Ensure Z scaler controls integrate with monitoring (SIEM/SOAR) and operational processes for incident triage and investigation; ensure deception telemetry is operationalized with actionable runbooks.
- Ensure policy testing, validation and troubleshooting is performed throughout the implementation lifecycle (SSL inspection changes, ZPA onboarding, and deception validation exercises).
- Drive automation and standardization (APIs/scripting) to improve operational efficiency, reporting and control assurance
- Creates an setting which anticipates risk, ensuring action is taken to quantify and mitigate them.
- Implements IT best practice in risk policies and governance frameworks in area of responsibility.
- Meets agreed SLAs/OLAs for platform stability and change success rates; reduction in recurring incidents through problem management.
- Successful completion of control assurance/testing cycles with demonstrable control effectiveness.

📌 IT Security Engineer ZScaler (Hyderabad)
🏢 Purview Services
📍 Hyderabad