Senior Security Researcher; Global Security

Position: Senior Security Researcher (Global Security)

Job Description

What is the opportunity?Do you enjoy cyber security research and innovation, proactive thinking and problem solving, in a challenging and adaptive environment while constantly thinking outside of the box? If so, this opportunity is right for you!

RBC`s Security Research & Innovation team is responsible for researching threats to the organization and its clients and employees and designing solutions and techniques for countering these threats. We are a team of experienced and enthusiastic security experts, researchers, developers, and innovators that are passionate about envisioning novel solutions to complex cyber security and digital crime problems. We take ideas through the full lifecycle of research, experimentation, development, and deployment to build solutions in areas where security vendors are one step behind.

We leverage cutting edge cloud devops, AI/ML, and security analysis technology to reduce risk to our organization, employees, and clients.

We’re looking for an experienced Senior
Security Researcher who is constantly thinking outside the box, ready to dive deep into the smallest details, is passionate about cybersecurity and has a natural detective sense.

The right candidate has experience in both security research/operations and development and enjoys innovation and applying a creative mindset to Cyber and Digital crime problems.
What will you do?

Research and maintain subject matter expertise relating to threats in the cyber and digital crime domains

Prototype and iterate on security solutions using modern application development methodologies

Ideate and experiment with techniques and methodologies for countering digital crime activity

Contribute to the evolution of existing in-house developed security products and solutions

Collaborate and foster relationships with multiple teams including Adversary Emulation (Red Team), Data Science, Threat Intelligence, Security Operation Center (SOC) and Digital Forensics and Incident Response (DFIR) to drive pragmatic cyber security improvement

Take a lead in developing, implementing, and refining our defensive tradecraft and tooling

Provide bespoke advisory and consultation services to senior executive management and perform as a cyber security SME for emerging threats and investigations

Integrate and utilize a wide range of data sources, data lakes and third-party security solutions

Leverage current AI and ML techniques and technologies to bring force multiplication to our efforts

What do you need to succeed?
Must-have

5+ years of Cyber Security operations experience preferably comprised of both defensive and offensive roles

Strong Innovative and outside of the box thinking mindset

Strong communication and collaboration skills

Strong and provable skills in Python development

Experience applying operational security considerations to security research activity

Hands-on experience in malware analysis, reverse engineering, or other security research niches

Familiarization with the cyber security Kill Chain phases and MITRE ATT&CK framework TTPs

Knowledge of offensive security tools, techniques, and procedures

Solid grasp of cyber security controls/products including both endpoint, network, application, and infrastructure

Well-rounded knowledge of various cyber security domains, focusing on operational security

Knowledge of current regional and global threat landscape

Nice-to-have

Experience leveraging Machine Learning models and/or AI technology against cyber security problems

Cloud Dev Ops experience of one or more leading cloud providers (AWS, GCP, Azure)

Financial industry experience or previous experience working for a cyber security team or security vendor

Experience participating in threat intelligence sharing groups, associations, or forums

Strong understanding of computing architecture, OS Internals and CPU architectures

Additional programming languages such as Javascript and front-end frameworks

Digital Forensics skills including memory/network/OS/disk forensics

Defensive oriented certification such as GIAC GREM, GCFA or other reputable, technical, and defensive/offensive focused certification

What’s in it for you?We thrive on the challenge to be…