Senior Security Research Engineer

This is a fully remote position, open to applicants in Turkey.

📋 Description

• Conduct ongoing research on emerging threats, malware, threat actors, and vulnerability exploitation campaigns, converting your insights into timely and authoritative content.

• Create impactful technical materials, such as research papers, security reports (both offensive and defensive), whitepapers, blogs, solution briefs, integration briefs, battlecards, webinars, demos, and presentations for conferences, showcasing Picus' technical expertise and competitive edge.

• Collaborate with Picus Labs, Product, and Engineering teams to transform new product capabilities into clear and engaging technical narratives that outline their functionality, the issues they address, and what differentiates Picus.

• Remain proactive about market trends by observing analyst viewpoints, leading category figures, emerging product segments, and the competitive environment. Utilize these insights to create unique content that enhances Picus' positioning, supports competitive discussions, and influences purchasing decisions.

• Enhance discoverability through search and AI answer engines via SEO and AEO strategies, optimizing technical content to attract organic inbound traffic and establish long-term topical authority within the exposure validation sector.

• Align content with the entire buyer journey, from top-of-funnel awareness to bottom-of-funnel decision-making, ensuring it not only informs but also engages prospects, aids evaluations, and drives conversions.

• Work collaboratively with Growth, Threat Research, Red and Blue Teams, and Alliances to convert research findings and technical insights into launch materials, campaigns, and public-facing content that effectively connects with the market.

⛳️ Requirements

• Over 5 years of experience in offensive and/or defensive cybersecurity, leveraging knowledge of the security and threat landscape.

• A portfolio showcasing published technical content or projects (such as blogs, papers, talks, or research).

• Ability to articulate complex technical concepts to diverse audiences, ranging from practitioners to executives.

• Exceptional proficiency in both written and verbal English.

• Technical know-how in penetration testing, pentest automation tools, vulnerability management, and validation of exposure or security controls, alongside hands-on experience with blue-team tools (like SIEM, EDR/XDR, and similar detection and response platforms).

• Autonomous/agentic security validation: demonstrated interest or initial hands-on research in this emerging field; both exploration and production experience are valuable.

• Practical experience with adversarial techniques.

• Scripting and automation capabilities (in Python, n8n, or similar agent/workflow tools).

• Strong understanding of contemporary security issues.

• Contributions to the cybersecurity community's knowledge base.

• Experience presenting at industry events.

• Relevant cybersecurity certifications (such as OSCP, CISSP, CCSP, GPEN, GSEC, BTL1 & BTL2, or similar).

• Familiarity with SEO/AEO principles and comprehensive content strategies across the sales funnel.

🏝️ Benefits

• Unlimited potential for growth! At Picus, you will have the opportunity to take on as much responsibility as you can handle, with new career development opportunities arising constantly due to our rapid expansion.

• Global exposure - Gain extensive experience working in a fast-growing startup while interacting with customers from around the globe.