Senior Security Researcher

Senior Security Researcher Hybrid role – Sheffield office PAYE Agency worker Contract role (£500 per day) The Security Research team, within the Global CROS function, provides a specialist approach to assessing the security of systems and technology, identifying previously unknown vulnerabilities and new attack techniques. Additionally, the Security Research team supports the wider CROS function by developing tools and automation of processes to enhance security assessment. The role holder will be responsible for leading, managing and delivering CROS security research projects, on a wide range of technologies to ensure that the bank is well positioned against a variety of Cybersecurity related advanced attack scenarios. The role holder will be required perform hands on security research on software and hardware technology, critical to the bank’s services. The individual will work cross-functionally to develop solutions that improves the delivery of CROS services. The successful candidate will have a proven track record in conducting security research and developing innovative scalable solutions. Additionally, the to be successful in this role the candidate should meet the following requirements: 0-day discovery and vulnerability disclosure Exploit development Mobile security System architecture Software development Source code review Hardware hacking Wireless technology Reverse Engineering Penetration testing Role: Deliver security research projects focused on the banks critical services and projects to ensure that design, quality and implementation of controls do not expose the bank to a significant level of risk. Achieve excellence by driving performance, compliance and security. Identifying previously unknown vulnerabilities and new attack techniques. Develop tools and automation of processes to enhance security assessment. Work with key stakeholders to proactively drive the reduction in Cybersecurity risks and to improve the security risk posture of the bank within the business risk appetite. Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions. Qualifications: Education to degree level or above (Desirable) or relevant work experience Experience / Skills: English - Fluent written and spoken Proven written and verbal communication skills Ability to develop clear business impact and justification to drive investment in team capabilities Demonstrable experience in vulnerability identification and exploitation. Participation in the Cyber Security industry. Demonstrated experience in network security. Demonstrated experience in embedded systems & hardware hacking. Understanding of analysis of mobile technologies. Understanding of analysis of common operating system, such as Linux, Windows, Google Android and iOS. Demonstrated experience in third party vulnerability disclosure. Demonstrated experience in software development. Demonstrable experience in tooling, automation and prototyping. Demonstrated experience in source code review. Demonstrated experience in penetration testing. Demonstrated experience in black box software security review techniques, including ‘fuzzing’ and reverse engineering.