Principal Security Researcher

A person on that role will

• Deliver security research projects focused on critical services, ensuring that design, quality and implementation of controls do not expose the bank to a significant level of risk.
• Identify previously unknown vulnerabilities and new attack techniques.
• Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and improve the security risk posture within the business risk appetite.
• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.
• Engage with relevant programmes that are critical to the bank.
• Understand the financial services industry security and threat landscape.
• Engage with a diverse set of stakeholders to achieve CROS objectives, including Business and Functions, Cybersecurity leads, Head of Cybersecurity functions and Control Owners.
• Achieve excellence by driving performance, compliance and security.
• Develop tools and automation of processes to enhance security assessment. This might include experimenting with AI (AI for Security) to solve complex problems related to Cyber Assessment and Testing.
• Leverage AI to enhance and optimize any phase of our security research project, specialy around the vulnerability discovery and validation.
• Engage with specialist technology functions such as, Cybersecurity Technology, Cybersecurity Operations and Security Architecture.
• Present strong teamwork attitude with the global CROS as well as all Global Businesses and Functions.
• Establish and maintain productive relationships across the bank in the client facing role.
• Leadership skills and the ability to manage stakeholders and staff.
• Adhere to operational controls, as outlined in procedures and policies to ensure risks are identified and managed.
• Establish all necessary operational controls within the tools and systems used.
• Identify new project opportunities and demonstrate innovative thinking.
• Develop and maintain excellent relationships and receive positive feedback on interactions with clients and stakeholders.
• Demonstrate sensitivity to the realities and concerns of their stakeholders' situation.
• Analyse and interpret the evolving security threat landscape.
• Use innovation in security to address the needs of customers and stakeholders.

Requirements

• Experience leading highly sensitive projects
• 0-day discovery and vulnerability disclosure
• Exploit development
• Mobile security
• System architecture
• Software development
• Source code review
• Hardware hacking
• Wireless technology
• Reverse Engineering
• Penetration testing
• AI LLM / GenAI Security assessments (Security for AI)
• AI in the discovery / validation of 0-days (AI for Security)

We offer a full-time employment contract

• Location: Kraków (hybrid, 6 office visits/month).
• Stable and long-term cooperation
• Well-defined career path at the European leader in engineering & IT consulting
• Opportunity to relocate and work in different ALTEN Polska branches
• After completion of the project, opportunity to engage in a subsequent one within the company
• Introduction and cooperation with dedicated Competences Manager

Benefits

• Medicover medical care
• Medicover dental care
• Medicover Benefits platform
• Medicover Sport card
• Referral Program
• Layette for a newborn employee’s child
• Group life insurance
• Pension scheme

We also guarantee

• Access to professional certifications with our technology partners (e.g. Google, ISTQB)
• Access to relevant industry events
• Access to the Knowledge Sharing Program
• Access to Referral program

We also offer cooperation based on a B2B or Contract of mandate (UZ).

Do not hesitate and join us!

NOTICE: We kindly inform you that we will contact the selected people.