Principal Security Researcher

ALTEN; Kraków; Hybrid; PLN 180,000 - 240,000; Full time

Benefits offered by this job

Medicover medical care

Medicover dental care

Medicover Benefits platform

Medicover Sport card

Referral program

Newborn layette

Group life insurance

Pension scheme

Job summary

ALTEN Polska is seeking a skilled security researcher to deliver research projects focused on critical services, ensuring that design, quality and implementation of controls do not expose the bank to significant risk.

You will identify unknown vulnerabilities, work with stakeholders to reduce cyber risks, and develop automation and AI-driven security assessments. This is a full-time, hybrid Kraków position with career growth and opportunities to relocate within ALTEN Polska.

Qualifications

• Experience leading highly sensitive projects.
• 0-day discovery and vulnerability disclosure.
• Exploit development.
• Mobile security.
• System architecture.
• Software development.
• Source code review.
• Hardware hacking.
• Wireless technology.
• Reverse Engineering.
• Penetration testing.
• AI LLM / GenAI Security assessments (Security for AI).
• AI in the discovery / validation of 0-days (AI for Security).

Responsibilities

• Deliver security research projects focused on critical services, ensuring that design, quality and implementation of controls do not expose the bank to a significant level of risk.
• Identify previously unknown vulnerabilities and new attack techniques.
• Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and improve the security risk posture within the business risk appetite.
• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.
• Develop tools and automation of processes to enhance security assessment.

Skills

Leadership of sensitive projects

0-day discovery

Vulnerability disclosure

Exploit development

Mobile security

System architecture

Software development

Source code review

Hardware hacking

Wireless technology

Reverse engineering

Penetration testing

AI security assessments

AI for 0-days discovery

Job description

A person on that role will:

• Deliver security research projects focused on critical services, ensuring that design, quality and implementation of controls do not expose the bank to a significant level of risk.
• Identify previously unknown vulnerabilities and new attack techniques.
• Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and improve the security risk posture within the business risk appetite.
• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.
• Engage with relevant programmes that are critical to the bank.
• Understand the financial services industry security and threat landscape.
• Engage with a diverse set of stakeholders to achieve CROS objectives, including Business and Functions, Cybersecurity leads, Head of Cybersecurity functions and Control Owners.
• Achieve excellence by driving performance, compliance and security.
• Develop tools and automation of processes to enhance security assessment. This might include experimenting with AI (AI for Security) to solve complex problems related to Cyber Assessment and Testing.
• Leverage AI to enhance and optimize any phase of our security research project, specialy around the vulnerability discovery and validation.
• Engage with specialist technology functions such as, Cybersecurity Technology, Cybersecurity Operations and Security Architecture.
• Present strong teamwork attitude with the global CROS as well as all Global Businesses and Functions.
• Establish and maintain productive relationships across the bank in the client facing role.
• Leadership skills and the ability to manage stakeholders and staff.
• Adhere to operational controls, as outlined in procedures and policies to ensure risks are identified and managed.
• Establish all necessary operational controls within the tools and systems used.
• Identify new project opportunities and demonstrate innovative thinking.
• Develop and maintain excellent relationships and receive positive feedback on interactions with clients and stakeholders.
• Demonstrate sensitivity to the realities and concerns of their stakeholders' situation.
• Analyse and interpret the evolving security threat landscape.
• Use innovation in security to address the needs of customers and stakeholders.

Requirements:

• Experience leading highly sensitive projects
• 0-day discovery and vulnerability disclosure
• Exploit development
• Mobile security
• System architecture
• Software development
• Source code review
• Hardware hacking
• Wireless technology
• Reverse Engineering
• Penetration testing
• AI LLM / GenAI Security assessments (Security for AI)
• AI in the discovery / validation of 0-days (AI for Security)

We offer a full-time employment contract

• Location: Kraków (hybrid, 6 office visits/month).
• Stable and long-term cooperation
• Well-defined career path at the European leader in engineering & IT consulting
• Opportunity to relocate and work in different ALTEN Polska branches
• After completion of the project, opportunity to engage in a subsequent one within the company
• Introduction and cooperation with dedicated Competences Manager

Benefits:

• Medicover medical care
• Medicover dental care
• Medicover Benefits platform
• Medicover Sport card
• Referral Program
• Layette for a newborn employee’s child
• Group life insurance
• Pension scheme

We also guarantee:

• Access to professional certifications with our technology partners (e.g. Google, ISTQB)
• Access to relevant industry events
• Access to the Knowledge Sharing Program
• Access to Referral program

We also offer cooperation based on a B2B or Contract of mandate (UZ).

NOTICE: We kindly inform you that we will contact the selected people.