Cyber Security Research Specialist

• Advance the current state-of-the-art in cybersecurity-related topics.
• Analyze and assess cybersecurity technologies, solutions, developments and processes.
• Assist in cybersecurity-related capacity building including awareness, theoretical training, practical training, testing, mentoring, supervising and sharing.
• Assist in the development of innovative cybersecurity-related solutions.
• Conduct experiments and develop proof of concept, pilots and prototypes for cybersecurity solutions.
• Conduct research, innovation and development work in cybersecurity-related topics.
• Contributes towards cutting-edge cybersecurity business ideas, services and solutions.
• Identify cross-sectoral cybersecurity achievements and apply them in a different context or propose innovative approaches and solutions.
• Lead or participate in innovation processes and projects including project management and budgeting.
• Manifest and generate research and innovation ideas.
• Publish and present scientific works and research and development results.
• Select and apply frameworks, methods, standards, tools and protocols including a building and testing a proof of concept to support projects.
• People Management
• Provide mentoring and technical coaching to junior analysts, interns, and detection engineers on malware analysis, exploit fundamentals, and threat research methodologies.
• Collaborate with Digital Banking, IT Development, Architecture, Fraud Risk, and Operations teams to share emerging threat insights and recommend mitigation strategies.

Minimum qualifications

• Bachelor’s in Computer Science or Information Security or MIS
• Preferably at least one of the following professional certifications:
• GREM (GIAC Reverse Engineering Malware)
• GCTI (GIAC Cyber Threat Intelligence)

Minimum experience

• Minimum 4-7 years of experience; 2–4 years in threat research/reversing/detection engineering; banking/fintech exposure preferred.

Key Skills

• Collaborate with other team members and colleagues
• Communicate, present and report to relevant stakeholders
• Decompose and analyze systems to develop security and privacy requirements and identify effective solutions
• Decompose and analyze systems to identify weaknesses and ineffective controls
• Generate new ideas and transfer theory into practice
• Identify and solve cybersecurity-related issues
• Monitor new advancements in cybersecurity-related technologies

Key Knowledge

• Cybersecurity standards, methodologies and frameworks
• Cybersecurity-related research, development and innovation (RDI)
• Legal, regulatory and legislative requirements on releasing or using cybersecurity related technologies
• Multidiscipline aspect of cybersecurity
• Responsible information disclosure procedures