Principal Security Researcher

A person on that role will:

• Deliver security research projects focused on critical services, ensuring that design, quality and implementation of controls do not expose the bank to a significant level of risk.

• Identify previously unknown vulnerabilities and new attack techniques.

• Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and improve the security risk posture within the business risk appetite.

• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.

• Engage with relevant programmes that are critical to the bank.

• Understand the financial services industry security and threat landscape.

• Engage with a diverse set of stakeholders to achieve CROS objectives, including Business and Functions, Cybersecurity leads, Head of Cybersecurity functions and Control Owners.

• Achieve excellence by driving performance, compliance and security.

• Develop tools and automation of processes to enhance security assessment. This might include experimenting with AI (AI for Security) to solve complex problems related to Cyber Assessment and Testing.

• Leverage AI to enhance and optimize any phase of our security research project, specialy around the vulnerability discovery and validation.

• Engage with specialist technology functions such as, Cybersecurity Technology, Cybersecurity Operations and Security Architecture.

• Present strong teamwork attitude with the global CROS as well as all Global Businesses and Functions.

• Establish and maintain productive relationships across the bank in the client facing role.

• Leadership skills and the ability to manage stakeholders and staff.

• Adhere to operational controls, as outlined in procedures and policies to ensure risks are identified and managed.

• Establish all necessary operational controls within the tools and systems used.

• Identify new project opportunities and demonstrate innovative thinking.

• Develop and maintain excellent relationships and receive positive feedback on interactions with clients and stakeholders.

• Demonstrate sensitivity to the realities and concerns of their stakeholders' situation.

• Analyse and interpret the evolving security threat landscape.

• Use innovation in security to address the needs of customers and stakeholders.

Requirements:

• Experience leading highly sensitive projects

• 0-day discovery and vulnerability disclosure

• Exploit development

• Mobile security

• System architecture

• Software development

• Source code review

• Hardware hacking

• Wireless technology

• Reverse Engineering

• Penetration testing

• AI LLM / GenAI Security assessments (Security for AI)

• AI in the discovery / validation of 0-days (AI for Security)

We offer a full-time employment contract

• Location: Kraków (hybrid, 6 office visits/month).

• Stable and long-term cooperation

• Well-defined career path at the European leader in engineering & IT consulting

• Opportunity to relocate and work in different ALTEN Polska branches

• After completion of the project, opportunity to engage in a subsequent one within the company

• Introduction and cooperation with dedicated Competences Manager

Benefits:

• Medicover medical care

• Medicover dental care

• Medicover Benefits platform

• Medicover Sport card

• Referral Program

• Layette for a newborn employee’s child

• Group life insurance

• Pension scheme

We also guarantee:

• Access to professional certifications with our technology partners (e.g. Google, ISTQB)

• Access to relevant industry events

• Access to the Knowledge Sharing Program

• Access to Referral program

We also offer cooperation based on a B2B or Contract of mandate (UZ).Do not hesitate and join us!NOTICE: We kindly inform you that we will contact the selected people.