Ot/ics Cybersecurity Researcher

**What if you can safeguard the future of all technologies?**:
Today, most of the systems are connected, automated, and remotely monitored/controlled. Be it Industrial or commercial, automation with connectivity has a huge impact on evolving sectors including HealthTech, Industry 4.0, Satellite, Defense/Military, 5G, and Smart cities. These are prone to cyberattacks due to various limitations in computation, bandwidth, and advances in Quantum computing.

**Responsibilities**:

- Perform research, analysis, design, testing and implementation of medium to complex Edge and IoT/OT network security and protection technologies.
- Do research on IoT/OT platforms, protocols and devices to identify vulnerabilities
- Conduct in-depth analysis of cyberattacks & malware threats to identify key characteristics and behavior, and develop signatures, rules, and indicators of compromise (IOCs) to detect and block them.
- Develop and maintain tools and techniques for detecting and analyzing cyberattacks including malware, DDoS etc via, custom scripts, plugins, sandboxes etc.
- Conduct research and analysis on network traffic and payloads to identify and analyze malicious activity and threats.
- Collect and prepare data sets for use in machine learning models, ensuring that they are representative, accurate, and relevant to the malware threats being analyzed.
- Work closely with data scientists and machine learning engineers to develop, test, and deploy machine learning models and algorithms for malware detection and classification.
- Continuously assess the effectiveness of existing security solutions and technologies, and make recommendations for improvements based on analysis of real-world threats and trends.
- Write technical proposal, communicate and present the solution
- Design, implement and review security architectures to ensure the adoption of various security practices, baselines and standards
- Collaborating with other teams to ensure security best practices are followed

**Requirements**:

- At least 5+ years of Cyber Security Research experience, or equivalent demonstrated through one or a combination of the following: work experience, training, military experience, education.
- At least 4-5 years of experience in Python and relevant frameworks such as Django and Flask
- At least 5 years of experience in development for Linux-based platforms
- Familiar with typical enterprise security solutions, such as Endpoint Security, Identity & Access Control solutions, Network Security, Analytics solutions, Data Loss Prevention or Vulnerability and Compliance.
- In-depth knowledge of cyber-attack analysis tools and techniques, including dynamic and static analysis, reverse engineering, and memory forensics.
- Experience with sandboxing tools and virtual machines.
- Hands-on experience in pentesting and hacking. Familiarity with vulnerability assessment and penetration testing tools such as Metasploit, Nmap or Burp Suite.
- Solid knowledge of the TCP/IP stack and networking technologies.
- Experience with network security technologies, including firewalls, intrusion detection/prevention systems, and endpoint protection solutions.
- Hands-on programming experience in Python, Golang, Bash, or any other programming language.
- Knowledge of the MITRE ATT&CK framework and Cyber Kill Chain.
- Experience building IoT/OT, Edge, and network security solutions.
- Would be a big plus:

- Knowledge and understanding of vulnerability identification and remediation.
- Strong knowledge of IoT cloud networking architecture, operations, and security.
- Knowledge and understanding of information security industry standards and government regulations.