Principal Security Researcher

Description

Deliver security research projects for critical services, ensuring the design, quality, and implementation of controls do not expose the bank to significant risk.

Responsibilities

• Identify previously unknown vulnerabilities and new attack techniques.
• Proactively reduce cybersecurity risk and improve the security risk posture within business risk appetite.
• Provide subject matter expertise and guidance to stakeholders across global businesses and functions.
• Engage with programmes critical to the bank and with specialist technology functions, including Cybersecurity Technology, Cybersecurity Operations, and Security Architecture.
• Understand and analyse the financial-services security and evolving threat landscape.
• Work with business and function stakeholders, cybersecurity leads, heads of cybersecurity functions, and control owners to achieve CROS objectives.
• Drive performance, compliance, and security while adhering to procedures, policies, and operational controls.
• Establish necessary operational controls within tools and systems used.
• Develop tools and process automation to enhance security assessment, including experimenting with AI for Security to address complex cyber assessment and testing problems.
• Leverage AI to enhance security research, particularly vulnerability discovery and validation.
• Build productive client-facing relationships across the bank and demonstrate leadership in managing stakeholders and staff.
• Identify project opportunities, apply innovative security approaches, and address customer and stakeholder needs.

Requirements

• Experience leading highly sensitive projects.
• 0-day discovery and vulnerability disclosure.
• Exploit development.
• Mobile security.
• System architecture.
• Software development.
• Source code review.
• Hardware hacking.
• Wireless technology.
• Reverse engineering.
• Penetration testing.
• AI LLM / GenAI security assessments (Security for AI).
• AI in the discovery and validation of 0-days (AI for Security).

Offer

• Full-time employment contract.
• Hybrid work in Kraków, with 6 office visits per month.
• Stable, long-term cooperation.
• Well-defined career path.
• Opportunity to relocate and work in different branches.
• Opportunity to engage in a subsequent project after project completion.
• Cooperation also available on a B2B or contract-of-mandate basis.

Benefits

• Medicover medical care.
• Medicover dental care.
• Medicover Benefits platform.
• Medicover Sport card.
• Referral program.
• Layette for a newborn employee’s child.
• Group life insurance.
• Pension scheme.
• Access to professional certifications with technology partners, such as Google and ISTQB.
• Access to relevant industry events.
• Access to the Knowledge Sharing Program.