Threat Research Engineer

Threat Research Engineer Description
- Threat Research Engineer Security Lab, HP Labs, Bristol, UK

We have an exciting opportunity to join the HP security team, to study current and emerging endpoint device attack trends, educate internal and external stakeholders on cyber threats, and help influence HP’s security research and innovation strategy. Our HP Security Lab is recruiting an experienced Threat Research Engineer to focus on researching, analysing, explaining, and reporting emerging threats affecting modern endpoints, from OS-level malware, to hardware and firmware attacks.

The role combines hands‑on technical analysis of malware with the ability to communicate complex findings clearly within HP as well as with external stakeholders and partners. In this role you will help HP maintain an authoritative view of the endpoint threat landscape and the state of the art in defensive endpoint security technologies. You will help educate internal and external stakeholders and inform HP security technology strategy.

You will work closely with other threat researchers, systems security research engineers and security technologists across HP, as well as business stakeholders such as the marketing and communication teams. The successful candidate will have solid technical skills, a background in low-level computer engineering or computer security architecture, and excellent written and spoken communication skills.

• Threat Research and Technical Analysis — Study and document emerging trends in endpoint security, from OS-level to hardware and firmware threats, including exploit behaviours, bootkits, ransomware, stealthy attacks and other platform-level attack techniques.
  
  - Analyse attacks observed in the wild, assess their risk, maturity and likely impact, and identify and document relevant mitigation approaches through HP or industry solutions.
  
  - Research public sources, vulnerability disclosures, technical reports, proof‑of‑concept material and attacker tradecraft to build evidence‑led assessments of threats of interest.
  
  - Maintain awareness of the latest cyber threat landscape, emerging technologies, defensive endpoint security standards and state of the art capabilities.
• Technical Analysis and Documentation of Endpoint Cyber Threats, and Endpoint Security State of the Art — Translate complex technical concepts into clear, accessible artefacts for technical experts, non‑technical teams and external stakeholders.
  
  - Contribute reports and educational material for technical and non‑technical audiences about malware and firmware attack trends and techniques.
• External Threat Research Communication and Engagement — Create high‑quality external‑facing threat research content, including HP Threat Research Blog posts, technical reports, conference submissions, customer‑facing briefings and media‑support materials.
  
  - Communicate clearly with external stakeholders such as customers, conference audiences, industry partners, analysts and media contacts, ensuring technical accuracy while tailoring the message to the audience.

• OS architecture knowledge foundation (Windows, Linux…) Some experience with reverse engineering tools
• Experience with attack and killchain analysis standard frameworks
• Strong understanding of endpoint security technologies, proven experience in computer security architecture and low‑level systems security.
• Ability to analyse malware, vulnerabilities, exploit behaviours, attack methods and proof‑of‑concept material to assess risk, maturity and impact.
• Ability to find details on attacks and vulnerabilities and gather information from public sources.
• Experience analysing qualitative and quantitative cyber threat data is desirable.
• Knowledge of scripting…