Senior Security Research Engineer

Türkiye·AnkaraRemoteFull-Timesenior

OtherSecurity Research Engineer

0 views0 saves0 applied

Apply Now

Quick Summary

Overview

Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on! About Picus Picus Security, the leading security validation company,

Technical Tools

OtherSecurity Research Engineer

Are you passionate about technology and enjoy explaining complex solutions in a way that everybody gets excited? If so, read on!

About Picus

Picus Security, the leading security validation company, gives organizations a clear picture of their cyber risk based on business context. Picus transforms security practices by correlating, prioritizing, and validating exposures across siloed findings so teams can focus on critical gaps and high-impact fixes. With Picus, security teams can quickly take action with one-click mitigations to stop more threats with less effort.

The Picus Security Validation Platform easily reaches across on-prem environments, hybrid clouds and endpoints coupled with Numi AI to provide exposure validation.

The pioneer of Breach and Attack Simulation, Picus delivers award-winning threat-centric technology that allows teams to pinpoint fixes worth pursuing, offering a 98% recommendation in Gartner Peer Review.

Picus is headquartered in Ankara, with a regional office in Istanbul, but our team is remote across Türkiye. Please note that all CVs must be submitted in English.

About the Role

~5 min read

We're looking to grow our Technical Marketing Team to support the high growth and global expansion plans of Picus. In this role, you'll go deep on real-world threats and turn that research into technical content that shows the market what Picus can actually do, surfacing the platform's technical depth and what sets it apart in exposure validation. It's a role that builds two things at once: your own name in the security community through published research, talks, and hands-on work, and Picus's growth as that content shapes how the market understands the category.

Our research is regularly picked up and cited by the wider community, from major news organizations like Reuters, the Associated Press, and Forbes, to specialist security outlets including Dark Reading, BleepingComputer, Infosecurity Magazine, SCWorld, and Help Net Security, as well as community platforms like Hacker News. Our work has also been referenced by industry authorities such as MITRE ATT&CK and Gartner, and cited in high-impact academic journals. You'll have the opportunity to take your work on stage at industry conferences such as Black Hat and GovWare, and at local meetups and user groups.

You'll be constantly challenged to develop your knowledge and skills in cybersecurity and share what you learn with the world, doing meaningful research for a fast-growing cyber security company.

Are you a SOC analyst, security consultant, threat hunter, security engineer, or red/blue/purple team member looking to transition into a more research- and publication-focused role? Do you blog or contribute to the security community, speaking at conferences or user groups? Then this role is for you.

Continuously research emerging threats, malware, threat actors, and vulnerability exploitation campaigns, translating your findings into timely, authoritative content,

Produce high-impact technical content, including research papers, offensive and defensive security reports, whitepapers, blogs, solution and integration briefs, battlecards, webinars, demos, and conference presentations, that demonstrate Picus’ technical depth and competitive differentiation,

Partner with Picus Labs, Product, and Engineering to translate new product capabilities into clear, compelling technical narratives that explain how they work, the problems they solve, and what sets Picus apart,

Stay ahead of market developments by monitoring analyst perspectives, category leaders, emerging product categories, and the competitive landscape. Turn these insights into differentiated content that strengthens Picus’ positioning, supports competitive conversations, and influences buyer decisions,

Drive discoverability across search and AI answer engines through SEO and AEO, optimizing technical content to generate organic inbound traffic and build long-term topical authority in the exposure validation market,

Map content across the full buyer journey, from top-of-funnel awareness to bottom-of-funnel decision-making, ensuring it not only educates but also engages prospects, supports evaluation, and drives conversion,

Collaborate closely with Growth, Threat Research, Red and Blue Teams, and Alliances to transform research, technical findings, and integrations into launch, campaign, and public-facing content that reaches and resonates with the market.

5+ years of experience in offensive and/or defensive cybersecurity utilizing knowledge of the security/threat landscape,

A portfolio of published technical content or projects (blogs, papers, talks, or research) ,

Ability to translate complex technical concepts for different audiences, from practitioners to executives,

Strong proficiency in written and verbal English,

Technical expertise in penetration testing and pentest automation tooling, vulnerability management, and exposure or security control validation, and hands-on familiarity with blue-team tooling (SIEM, EDR/XDR, and similar detection and response platforms),

Autonomous/agentic security validation: interest or early hands-on research (emerging area; exploration counts as much as production experience),

Hands-on experience in adversarial techniques,

Scripting and agentic automation skills (Python, n8n, or comparable agent/workflow tooling),

Strong knowledge of modern security problems,

Community contribution to cybersecurity knowledge,

Presentations at industry events,

Cybersecurity related certifications (OSCP, CISSP, CCSP, GPEN, GSEC, BTL1 & BTL2, or similar.),

Understanding of SEO/AEO principles and full-funnel content strategy.

Working at Picus

Fascinating work - a chance to shape and lead an exciting, fast-growing cyber security segment. Security Validation is a concept that helps organizations evaluate their security posture in a continuous, automated, and repeatable way. This approach allows for the identification of imminent threats, provides recommended actions, and produces valuable metrics about cyber-risk levels.

Unlimited opportunity! We are growing. At Picus, you'll be provided with as much responsibility as you can handle - new career development opportunities constantly arise given our rate of growth.

Global exposure - Get a lot of experience working not only in a fast-growing startup but also interact with customers all around the world.

Be part of a global remote team who is taking on Exposure Validation and a growing market segment.

We are an equal opportunity employer, and all qualified applicants will receive consideration for employment without regard to age, sex, race, color, national origin, religious belief, gender or gender reassignment, sexual orientation, marriage or civil partnership, pregnancy and maternity, disability, protected veteran status, or any other characteristic protected by International law. Upon conditional offer of employment, candidates are required to complete reference and identity checks in line with local labor laws and as per the Company’s employment policy.

Picus Security processes candidates' personal data in accordance with applicable data protection laws. For detailed information on how your personal data is processed during the recruitment process, please review our Candidate Privacy Notice