Principal Security Researcher

The Security Research team, within the Global Cybersecurity Research and Offensive Security CROS function at HSBC Technology Poland, specializes in assessing the security of systems and technology, identifying unknown vulnerabilities and new attack techniques, and developing tools and automation to enhance security assessment.

• Fluent written and spoken English.
• Proven written and verbal communication skills.
• Participation in the Cyber Security industry.
• Demonstrated experience in embedded systems and hardware hacking.
• Understanding of analysis of common operating systems such as Linux, Windows, Google Android, and iOS.
• Demonstrated experience in third party vulnerability disclosure.
• Demonstrated experience in penetration testing.
• Demonstrated experience in black box software security review techniques, including fuzzing and reverse engineering.

• Work with key stakeholders to proactively reduce Cybersecurity risks and improve HSBC's security risk posture within business risk appetite.
• Provide subject matter expertise and guidance to a broad range of stakeholders across global business and functions.
• Engage with relevant programmes critical to the bank.
• Understand the financial services industry security and threat landscape.
• Engage with diverse stakeholders including Business and Functions, Cybersecurity leads, Head of Cybersecurity functions, and Control Owners to achieve CROS objectives.
• Develop tools and automation of processes to enhance security assessment.
• Engage with specialist technology functions such as Cybersecurity Technology, Cybersecurity Operations, and Security Architecture.
• Demonstrate leadership skills and manage stakeholders and staff.
• Adhere to operational controls outlined in procedures and policies to ensure risks are identified and managed.

Only candidates fluent in English are considered. The role requires adherence to operational controls and risk management policies.