Staff Threat Research Engineer - GSK

Key Responsibilities: S ecurity Content Development: Develop security and compliance content to assist enterprises in making accurate configuration and risk decisions. SaaS Application Analysis: Analyze SaaS application architectures, APIs, and data models to build security graphs for the platform. Research Security Gaps: Identify and address security gaps in SaaS environments, focusing on compliance, visibility, and remediation strategies. Threat Vector Exploration: Explore new threat vectors and provide domain expertise across teams (engineering, research, product, and customer success). Security Insights Publication: Publish security insights through articles, blogs, or presentations at conferences. Mentorship: Guide and mentor a team of researchers in creating high-quality security detections and strategies. Required Skills & Experience: Experience: 4–6 years in the security domain (CSPM, DSPM, ASPM, or similar). Security Expertise: Strong understanding of information security principles, with specific expertise in SaaS environments. Security Analysis: Hands-on experience in security analysis, SaaS deployment hardening, and developing security content. Scripting Skills: Proficiency in Python and Shell scripting for automation and problem-solving. Cloud Security: Knowledge of public cloud security and related security solutions. Database & Big Data: Experience working with SQL databases and big data frameworks like Apache Spark and BigQuery. API Automation: Familiarity with API-based automation or novel product development in security. Additional Skills: Communication & Collaboration: Strong ability to communicate complex security concepts clearly and collaborate with cross-functional teams. Adaptability & Learning: Quick learner with creativity and adaptability in unfamiliar domains. Analytical Thinking: Strong detail-oriented, analytical thinking for solving security problems. Remote Work: Comfortable working asynchronously in a distributed, global team environment.