Cyber Security Researcher

**Cyber Security Researcher**
**Singapore**
**Competitive Salary + Bonus**

Datasearch is collaborating with a prominent threat and security management firm specialising in IoT and OT devices and networks to find a Cyber Security Researcher. The selected individual will be accountable for devising, implementing, and supervising cybersecurity solutions aimed at actively identifying and mitigating security risks. They will adopt agile scrum methodologies to elicit requirements from Product Owners and assist in coordinating the development team, providing mentorship to junior members. This position will entail addressing a wide range of issues, such as cryptographic implementations, machine learning, IoT communication, and DevOps-related matters.

**Responsibilities**:

- Carry out extensive research, analysis, design, testing, and implementation of sophisticated Edge and IoT/OT network security and protection technologies.
- Investigate IoT/OT platforms, protocols, and devices to detect potential vulnerabilities.
- Thoroughly analyse cyberattacks and malware threats, identifying their key characteristics and behaviour. Create signatures, rules, and indicators of compromise (IOCs) to effectively detect and block them.
- Create and maintain tools and techniques, such as custom scripts, plugins, and sandboxes, to detect and analyse cyberattacks like malware and DDoS attacks.
- Research and analyse network traffic and payloads to pinpoint and study malicious activities and threats.
- Gather and prepare datasets suitable for machine learning models, ensuring their accuracy, relevance, and representation of the analysed malware threats.
- Collaborate closely with data scientists and machine learning engineers to develop, test, and implement machine learning models and algorithms for identifying and categorising malware.
- Continuously evaluate the efficiency of existing security solutions and technologies, and propose improvements based on real-world threats and trends.
- Write technical proposals and effectively communicate and present solutions.
- Devise and review security architectures to ensure the adoption of diverse security practices, baselines, and standards.
- Work collaboratively with other teams to ensure adherence to security best practices.

**Skills / Experience**:

- Requires a minimum of 4+ years of Cyber Security Research experience, or equivalent demonstrated through work experience, training, military service, or education.
- 4-5 years of Python experience, including relevant frameworks like Django and Flask.
- 5 years of Linux-based platform development experience.
- Familiarity with enterprise security solutions, including Endpoint Security, Identity & Access Control, Network Security, Analytics, Data Loss Prevention, and Vulnerability and Compliance.
- Proficient in cyber-attack analysis tools and techniques, such as dynamic and static analysis, reverse engineering, and memory forensics.
- Experience with sandboxing tools and virtual machines.
- Hands-on involvement in pentesting and hacking, using tools like Metasploit, Nmap, or Burp Suite for vulnerability assessment and penetration testing.
- Strong knowledge of TCP/IP stack and networking technologies.
- Expertise with network security technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
- Practical programming skills in Python, Golang, Bash, or other programming languages.
- Familiarity with the MITRE ATT&CK framework and Cyber Kill Chain.
- Previous experience in developing IoT/OT, Edge, and network security solutions.

**Datasearch Consulting** Pte Ltd | Licence no. 17S8525 | Reg No. R1440023