Threat Research Engineer

Job Requirements

• Technical Understanding and Expertise OS architecture knowledge foundation (Windows, Linux…) Some experience with reverse engineering tools Experience with attack and killchain analysis standard frameworks Strong understanding of endpoint security technologies, proven experience in computer security architecture and low-level systems security.
• OS architecture knowledge foundation (Windows, Linux…)
• Some experience with reverse engineering tools
• Experience with attack and killchain analysis standard frameworks
• Strong understanding of endpoint security technologies, proven experience in computer security architecture and low-level systems security.
• Threat Analysis and Research Skills Ability to analyse malware, vulnerabilities, exploit behaviours, attack methods and proof-of-concept material to assess risk, maturity and impact. Ability to find details on attacks and vulnerabilities and gather information from public sources. Experience analysing qualitative and quantitative cyber threat data is desirable. Knowledge of scripting languages such as Python.
• Ability to analyse malware, vulnerabilities, exploit behaviours, attack methods and proof-of-concept material to assess risk, maturity and impact.
• Ability to find details on attacks and vulnerabilities and gather information from public sources.
• Experience analysing qualitative and quantitative cyber threat data is desirable.
• Knowledge of scripting languages such as Python.
• Analysis, Documentation and Knowledge Management Skills Strong ability to synthesise complex information into structured documentation aimed at the relevant stakeholders. Experience writing clear technical analysis documents, and authoring technical reports.
• Strong ability to synthesise complex information into structured documentation aimed at the relevant stakeholders.
• Experience writing clear technical analysis documents, and authoring technical reports.
• Communication and External Engagement Skills Excellent writing skills and an ability to convey technical knowledge to both technical experts and non-technical audiences. Strong verbal communication skills, including the ability to brief customers, contribute to conference material, support media-facing narratives and partner with marketing and communications teams. Previous experience publishing technical reports, blogs or external threat research content is highly desirable.
• Excellent writing skills and an ability to convey technical knowledge to both technical experts and non-technical audiences.
• Strong verbal communication skills, including the ability to brief customers, contribute to conference material, support media-facing narratives and partner with marketing and communications teams.
• Previous experience publishing technical reports, blogs or external threat research content is highly desirable.

The following skills and attributes are a plus

• Engineering-level knowledge in systems security.
• Knowledge of PC hardware and firmware architecture and technologies, including x86, ARM, UEFI, PCIe and DMA.
• Knowledge of OS kernel and hypervisor security.
• Knowledge of enterprise IT, device security and security management.
• Some experience in attack analysis, penetration testing or exploit kits, such as Metasploit.
• Experience in malware analysis, vulnerability research, attack reproduction or attack demonstration.
• Experience with scripting languages is required. C or C++ coding is a plus..
• Experience writing and presenting about offensive security, platform security or threat research topics.
• Degree in Electronic Engineering, Computer Science, Cybersecurity or a related field, or equivalent experience.

About HP

Equal opportunity employer

Equal Opportunity Employer (EEO) -