Associate Security Research Engineer

This is a fully remote position, open to applicants in Turkey.

📋 Description

• Conduct ongoing research into emerging threats, malware, threat actors, and vulnerability exploitation campaigns, transforming your insights into timely and informative content.

• Contribute to various technical content types including blogs, whitepapers, demos, solution and integration briefs, offensive and defensive research reports, and research papers, while developing your personal voice and a robust portfolio.

• Gain an in-depth understanding of the Picus platform and work closely with Picus Labs, Product, and Engineering to convert new capabilities into clear and engaging technical narratives.

• Keep an eye on market trends, analyst viewpoints, category leaders, emerging product categories, and the competitive landscape, aiding the team in converting these insights into unique technical content.

• Discover how technical content enhances discoverability through search and AI answer engines via SEO and AEO, and supports audiences throughout the purchasing funnel, from awareness to decision-making.

• Collaborate with Growth, Threat Research, Red and Blue Teams, and Alliances to translate research, technical findings, and integrations into public-facing content that effectively reaches and connects with the market.

⛳️ Requirements

• 1–2 years of experience (including internships, labs, CTFs, or academic/personal projects) in offensive and/or defensive cybersecurity, demonstrating a foundational understanding of the security/threat landscape.

• Some experience in technical writing, or a strong desire to create a portfolio of published content or projects (blogs, notes, write-ups, talks, or research).

• A capability, or a strong willingness to develop the capability, to convey technical concepts to diverse audiences.

• Excellent written and verbal communication skills in English.

• A curiosity and commitment to continuous learning in a rapidly evolving field.

• Familiarity with penetration testing tools, vulnerability management, or security control validation, along with some practical experience using blue-team tools such as SIEM or EDR/XDR (lab work, coursework, or job experience is acceptable).

• Interest in autonomous/agentic security validation (this emerging area is open for exploration).

• Basic hands-on experience with adversarial techniques (home lab, CTF, or coursework counts).

• Proficiency in basic scripting or automation skills (Python, n8n, or similar agent/workflow tools).

• Awareness of contemporary security challenges.

• Any contributions to the cybersecurity community, no matter how small (blog, GitHub, forum, meetup).

• Any experience with public speaking or presentations.

• Cybersecurity-related certifications, including entry-level ones (Security+, eJPT, BTL1, or similar; OSCP/CISSP-level not expected but advantageous).

• Understanding of SEO/AEO principles or content strategy.

🏝️ Benefits

• Unlimited opportunity

• Global exposure - Gain extensive experience working in a rapidly growing startup and engage with customers worldwide.

• Be part of a global remote team tackling Exposure Validation in a burgeoning market segment.

• Equal opportunity employer, with all qualified applicants considered for employment without regard to age, sex, race, color, national origin, religious belief, gender or gender reassignment, sexual orientation, marriage or civil partnership, pregnancy and maternity, disability, protected veteran status, or any other characteristic protected by international law.

• Reference and identity checks conducted in accordance with local labor laws.