Principal Investigator

**Teams of expert faculty, students and recent graduates collaborate with industry partners and their staff to deliver innovative cybersecurity-based solutions to pressing business problems and opportunities. Projects can include producing and testing prototypes, evaluating new technologies, and developing new or improved products or processes for small
- and medium-sized businesses (SMEs). All projects are funded by provincial or federal government grants.

The Centre for Cybersecurity Innovation is located at the Oshawa Campus and provides SMEs access to facilities, equipment, technical expertise, and project services to assist them in product development, technology adoption, expansion into new markets and commercialization of new products, services and processes.

**The responsibilities of Durham College Principal Investigator include, but are not limited to**:

- Conducting applied research projects in collaboration with college staff and industry partners.
- Developing work plans in collaboration with industry partners, including specific resource requirements, milestones and deliverables.
- Attending meetings and presenting project scopes, deliverables and metrics.
- Identifying human resource needs and interviewing / hiring student research assistants.
- Supervising student research assistants.
- Providing technical expertise and leadership for applied research projects.
- Preparing and implementing dissemination activities, including assisting Research Assistants in the preparation of final materials/reports.
- Assisting college staff and students with development and completion of final reports and collection of metrics.
- Assisting with follow-up activities with industry clients or funders.
- Presenting findings at internal and external events, including conferences and seminars, as required - assisting with development of case studies.
- An undergraduate degree in Cybersecurity, Information Technology, Business or a related field, preferably a masters degree.
- Three to five years of relevant industry experience and demonstrated ability in fields and technologies relevant to project opportunities.
- Demonstrated research skills and project delivery abilities preferably with experience carrying out research projects.
- Excellent organizational and time management skills, with excellent attention to detail, and the ability to multi-task and prioritize projects.
- Strong written and verbal communication and analytical skills, with ability to work and communicate effectively in an office environment with frequent interruptions and dynamic deadlines.
- Self-motivated and independent worker who also functions well in a collaborative team environment.
- Strong interpersonal skills and the ability to present and interact with a variety of stakeholders including students, other faculty members, support staff, administrators, other departments within the college and with external partners.
- Uncompromised commitment to confidentiality.
- Established track record of delivering commercial projects involving incident response, vulnerability analysis, penetration testing, risk mitigation and compliance.
- Experience with programming and scripting languages (e.g., PHP,.NET, Java, C, Perl, etc.).
- Experience with Cloud and distributed technology architectures and security controls.
- Experience with Industrial Control System (ICS) environments or securing ICS/sensitive segregated networks.
- Certifications in two or more of the following areas required: CISSP, GSEC, CISM, GISO, GCIH, CISA
- Direct project management experience required. PMP certification and Network certification and/or work experience is considered an asset.
- Hands-on coding experience with C/C++, Python, Scala, Lua, R, Matlab, and/or Java.
- Strong experience with systems for large scale data analysis including Spark, Hadoop and Kafka.
- Hands-on expertise with commercial and open-source penetration testing tools (ex: Burp Suite, OWASP ZAP, Nessus, Nmap, Metasploit, CANVAS, SQLMap, Empire, etc.).
- Understanding of Linux/Windows-based operating systems
- Programming skills in Python, Powershell, Ruby, or other relevant languages.
- Knowledge of common penetration testing methodology and standards (PTES, OWASP, CREST, OSSTMM, CWE, CAPEC, CVE, CVSS, etc.)

**Working conditions**:

- Up to 24 hours per week, Monday to Friday.
- Occasional weekend and evening hours may be required.
- Some travel to industry partner premises.

**Required Skills**:
Hourly rate: $50.00

Required Experience