Sr. Security Researcher (Remote) | Job in Hampshire

In this senior-level remote position as a Security Researcher, you will be expected to lead the company's offensive security and vulnerability research efforts. Your primary responsibilities will involve discovering, analyzing, and remediating cybersecurity threats, while also collaborating with internal teams to enhance our overall security posture.

• Threat Research and Intelligence: Continuously monitor threat landscapes, analyze trends, and identify potential threats that may impact the company's digital assets. Develop strategies to mitigate identified risks.

• Vulnerability Discovery and Remediation: Conduct proactive and reactive vulnerability assessments on various systems, applications, and networks. Collaborate with development teams to implement fixes for discovered vulnerabilities.

• Penetration Testing: Perform penetration tests and security audits to identify weaknesses in our security infrastructure. Develop and execute test plans, document findings, and provide recommendations for remediation.

• Incident Response: Respond quickly and effectively to cybersecurity incidents. Analyze incident data, identify root causes, and develop strategies to prevent future occurrences.

• Security Training and Awareness: Collaborate with the training team to develop and deliver security awareness training for employees. Ensure that best practices in information security are understood and followed by all staff members.

• Collaboration and Innovation: Work closely with other cybersecurity professionals, both within and outside of the company, to share insights, learn from one another, and drive innovation in the field of cybersecurity.

• Compliance: Ensure that our security practices are compliant with relevant regulations and standards. Provide guidance on how to maintain compliance during development and operations.

• Reporting: Prepare regular reports on the state of our security posture, threat landscape, and incident response activities. Communicate findings effectively to executive management and other stakeholders.

• Public Speaking and Thought Leadership: Represent the company at industry conferences, meetups, and events. Publish articles and speak publicly about your research and insights in the field of cybersecurity.

• Research and Development: Pursue independent research projects to identify emerging threats and trends, and to develop new defensive and offensive techniques. Stay up-to-date with the latest tools, technologies, and best practices in the field.