Position: Senior Security Researcher for Cyber-Security Startup
Company: Talent First
Experience required: 5y
Category: Other
English level: upper
Published: 2023-04-01T00:00:00+03:00

We are looking for Senior Security Researcher for our customer - London-based early-stage cyber-security startup.

The Senior Security Researcher is responsible for driving R&D innovation in the realms of Cyber Posture Management, Security Architecture Automation, Threat modeling &Risk Management. This is a full-time position reporting to the CTO.

Responsibilities
- Research into the ability of market-leading, best-of-breed security solutions to mitigate offensive techniques, attacks, tools&toolkits.
- Perform hands-on evaluations of leading security products and solutions in the market to better understand their capabilities and functionality.
- Perform threat modeling to define the attack surface and compromise scenarios of various assets and environments.
- Develop models to evaluate the state of security, configurations, and security architecture to identify gaps and opportunities.
- Research into optimal mitigations and posture enhancement initiatives & processes against security gaps and opportunities.
- Write up highly technical & detailed deliverables on various research activities and deeply collaborate with the CTO branch & R&D team to drive the product’s capabilities and functionality.

Requirements

- At least 5 years of experience as a cybersecurity professional, including:
Knowledge of security design and architecture.
- Hands-on technical configuration and implementation of cyber security controls
and standards.
- At least 2 years of experience in one of the following roles: Security
Consultant (Big4, Sygnia, Local market leaders), Security Architect, Security Engineer, SOC manager (preferably within a global, publicly traded enterprise),
Offensive Security expert/Red-teamer.
- Deep familiarity and experience with offensive-security principles, including
attacks, offensive tools&toolkits, TTPs, and models such as MITRE Att&ck.
- At least one of the following certifications or comparable skills and experience: CISSP,
OSCP, CCIE, CCSE, JNSE, CCDP, CSA, or equivalent military tech training.
- Demonstrated experience working in IT, security engineering, application security, or similar positions in which you have gained profound network security understanding (routers, firewalls and NG FW & IPS, proxies, WAF, DLP, AD, GPO, EDR, cloud security).
- Knowledge of authentication protocols, Active Directory, Exchange, and Office 365. 

Azure and AWS knowledge – an advantage.
Ability to document and explain technical information in a concise, understandable manner.
Experience designing, implementing, and measuring relevant security and technology management critical success factors, key performance indicators, and metrics.
Ability to work in parallel on multiple projects under tight deadlines and perform complex problem-solving activities under pressure.
Academic degree, preferably in Computer Sciences or a technical discipline – an advantage.
Ability to work independently for extended periods of time yet communicate efficiently within a team environment.
Good English (written and spoken). Native English speaker – an advantage.

We evaluate qualified applicants without regard to race, color, religion, sex, national origin, disability, veteran status, and other legally protected characteristics.