Threat Research Engineer in Bristol

We have an exciting opportunity to join the HP security team, to study current and emerging endpoint device attack trends, educate internal and external stakeholders on cyber threats, and help influence HP’s security research and innovation strategy. Our HP Security Lab is recruiting an experienced Threat Research Engineer to focus on researching, analysing, explaining, and reporting emerging threats affecting modern endpoints, from OS-level malware to hardware and firmware attacks. The role combines hands-on technical analysis of malware with the ability to communicate complex findings clearly within HP as well as with external stakeholders and partners.

In this role you will help HP maintain an authoritative view of the endpoint threat landscape and the state of the art in defensive endpoint security technologies. You will help educate internal and external stakeholders and inform HP security technology strategy. You will work closely with other threat researchers, systems security research engineers and security technologists across HP, as well as business stakeholders such as the marketing and communication teams.

The successful candidate will have solid technical skills, a background in low-level computer engineering or computer security architecture, and excellent written and spoken communication skills.

Job Responsibilities

• Study and document emerging trends in endpoint security, from OS-level to hardware and firmware threats, including exploit behaviours, bootkits, ransomware, stealthy attacks and other platform-level attack techniques.
• Analyse attacks observed in the wild, assess their risk, maturity and likely impact, and identify and document relevant mitigation approaches through HP or industry solutions.
• Research public sources, vulnerability disclosures, technical reports, proof-of-concept material and attacker tradecraft to build evidence-led assessments of threats of interest.
• Maintain awareness of the latest cyber threat landscape, emerging technologies, defensive endpoint security standards and state of the art capabilities.
• Translate complex technical concepts into clear, accessible artefacts for technical experts, non-technical teams and external stakeholders.
• Contribute reports and educational material for technical and non-technical audiences about malware and firmware attack trends and techniques.
• Create high-quality external-facing threat research content, including HP Threat Research Blog posts, technical reports, conference submissions, customer-facing briefings and media-support materials.
• Communicate clearly with external stakeholders such as customers, conference audiences, industry partners, analysts and media contacts, ensuring technical accuracy while tailoring the message to the audience.

Job Requirements

• OS architecture knowledge foundation (Windows, Linux…)
• Some experience with reverse engineering tools
• Experience with attack and killchain analysis standard frameworks
• Strong understanding of endpoint security technologies, proven experience in computer security architecture and low-level systems security.
• Ability to analyse malware, vulnerabilities, exploit behaviours, attack methods and proof-of-concept material to assess risk, maturity and impact.
• Ability to find details on attacks and vulnerabilities and gather information from public sources.
• Experience analysing qualitative and quantitative cyber threat data is desirable.
• Knowledge of scripting languages such as Python.
• Strong ability to synthesise complex information into structured documentation aimed at the relevant stakeholders.
• Experience writing clear technical analysis documents, and authoring technical reports.
• Excellent writing skills and an ability to convey technical knowledge to both technical experts and non-technical audiences.
• Strong verbal communication skills, including the ability to brief customers, contribute to conference material, support media-facing narratives and partner with marketing and communications teams.
• Previous experience publishing technical reports, blogs or external threat research content is highly desirable.

The following skills and attributes are a plus

• Engineering-level knowledge in systems security.
• Knowledge of PC hardware and firmware architecture and technologies, including x86, ARM, UEFI, PCIe and DMA.
• Knowledge of OS kernel and hypervisor security.
• Knowledge of enterprise IT, device security and security management.
• Some experience in attack analysis, penetration testing or exploit kits, such as Metasploit.
• Experience in malware analysis, vulnerability research, attack reproduction or attack demonstration.
• Experience with scripting languages is required. C or C++ coding is a plus.
• Experience writing and presenting about offensive security, platform security or threat research topics.
• Degree in Electronic Engineering, Computer Science, Cybersecurity or a related field, or equivalent experience.

At HP, you’ll have a chance to create tools, technology, and solutions that reshape the way the world works in the future. If you’re looking to join a company that allows you to connect with a network of professionals eager to support you in doing your best work, we want to talk to you. Our legendary culture guides every employee toward success—fostering collaboration and driving innovation.

Operating in over 170 countries, HP is always creating new services, products, and capabilities giving you more opportunities to advance your career. Here, innovation is the key to professional development and career mobility.

When you join HP, you’re joining a company that believes every voice matters and that we all deserve a seat at the table. From the boardroom to factory floor, we create a culture where everyone is respected and where people can be themselves. You will be part of a global laboratory where different perspectives and experiences will help you solve problems in new ways. This is where you can build a long and wide-ranging career.