Staff Threat Research Engineer - GSK

Key Responsibilities:

Security Content Development: Develop security and compliance content to assist enterprises in making accurate configuration and risk decisions.

SaaS Application Analysis: Analyze SaaS application architectures, APIs, and data models to build security graphs for the platform.

Research Security Gaps: Identify and address security gaps in SaaS environments, focusing on compliance, visibility, and remediation strategies.

Threat Vector Exploration: Explore new threat vectors and provide domain expertise across teams (engineering, research, product, and customer success).

Security Insights Publication: Publish security insights through articles, blogs, or presentations at conferences.

Mentorship: Guide and mentor a team of researchers in creating high-quality security detections and strategies.

Required Skills & Experience:

• Experience: 4–6 years in the security domain (CSPM, DSPM, ASPM, or similar).
• Security Expertise: Strong understanding of information security principles, with specific expertise in SaaS environments.
• Security Analysis: Hands-on experience in security analysis, SaaS deployment hardening, and developing security content.
• Scripting Skills: Proficiency in Python and Shell scripting for automation and problem-solving.
• Cloud Security: Knowledge of public cloud security and related security solutions.
• Database & Big Data: Experience working with SQL databases and big data frameworks like Apache Spark and BigQuery.
• API Automation: Familiarity with API-based automation or novel product development in security.

Additional Skills:

• Communication & Collaboration: Strong ability to communicate complex security concepts clearly and collaborate with cross-functional teams.
• Adaptability & Learning: Quick learner with creativity and adaptability in unfamiliar domains.
• Analytical Thinking: Strong detail-oriented, analytical thinking for solving security problems.
• Remote Work: Comfortable working asynchronously in a distributed, global team environment.