HP
Threat Research Engineer

How your CV stacks up
Upload your CV to see how well it fits this job role
?%
Threat Research Engineer
Description
Security Lab, HP Labs, Bristol, UK
We have an exciting opportunity to join the HP security team, to study current and emerging endpoint device attack trends, educate internal and external stakeholders on cyber threats, and help influence HP’s security research and innovation strategy. Our HP Security Lab is recruiting an experienced Threat Research Engineer to focus on researching, analysing, explaining, and reporting emerging threats affecting modern endpoints, from OS-level malware, to hardware and firmware attacks. The role combines hands-on technical analysis of malware with the ability to communicate complex findings clearly within HP as well as with external stakeholders and partners.
In this role you will help HP maintain an authoritative view of the endpoint threat landscape and the state of the art in defensive endpoint security technologies. You will help educate internal and external stakeholders and inform HP security technology strategy. You will work closely with other threat researchers, systems security research engineers and security technologists across HP, as well as business stakeholders such as the marketing and communication teams.
The successful candidate will have solid technical skills, a background in low-level computer engineering or computer security architecture, and excellent written and spoken communication skills.
Job Responsibilities
Threat Research and Technical Analysis
- Study and document emerging trends in endpoint security, from OS-level to hardware and firmware threats, including exploit behaviours, bootkits, ransomware, stealthy attacks and other platform-level attack techniques.
- Analyse attacks observed in the wild, assess their risk, maturity and likely impact, and identify and document relevant mitigation approaches through HP or industry solutions.
- Research public sources, vulnerability disclosures, technical reports, proof-of-concept material and attacker tradecraft to build evidence-led assessments of threats of interest.
- Maintain awareness of the latest cyber threat landscape, emerging technologies, defensive endpoint security standards and state of the art capabilities.
Technical Analysis and Documentation of Endpoint Cyber Threats, and Endpoint Security State of the Art
- Translate complex technical concepts into clear, accessible artefacts for technical experts, non-technical teams and external stakeholders.
- Contribute reports and educational material for technical and non-technical audiences about malware and firmware attack trends and techniques.
External Threat Research Communication and Engagement
- Create high-quality external-facing threat research content, including HP Threat Research Blog posts, technical reports, conference submissions, customer-facing briefings and media-support materials.
- Communicate clearly with external stakeholders such as customers, conference audiences, industry partners, analysts and media contacts, ensuring technical accuracy while tailoring the message to the audience.
Reasons to use Rodeo
I’m in my final year doing Economics and I don’t know whether to apply for grad schemes now or do a masters first. What do you think?
Honest answer — it depends on where you want to end up. A lot of top grad schemes (Big 4, civil service, banking) don’t need a masters. Let’s look at the ones you’d be competitive for now, and we can decide if a masters actually adds anything.
Also worth knowing: most autumn 2026 applications are open now. Timing matters more than you think.
Start with a chat, not a search bar
Grad scheme, placement, apprenticeship? Not sure what you want yet — that's fine. Your agent talks it through with you and turns "I have no idea" into a shortlist.
Graduate Consultant — 2026 Scheme
Why you're a good match
StrongYour economics background and your summer at a regional bank line up with what PwC looks for on the consulting scheme. Applications close in four weeks.
See breakdownIt searches the market for you
Every day your agent scans the market matching roles against what actually matters to you, not just keywords on a CV.
Why you're a good match
You’ve got the grades and the economics background, and your bank internship is exactly the experience this scheme looks for. Apply soon — deadlines close within the month.
Experience fit
Your summer at the bank plus your econometrics coursework map directly to the day-one responsibilities on this scheme — client modelling, market briefings, and deal support.
Only hits
No noise. No "maybe this fits." Just roles with a clear explanation of why they're right — and where to focus when applying.
Job Requirements
Technical Understanding and Expertise
- OS architecture knowledge foundation (Windows, Linux…)
- Some experience with reverse engineering tools
- Experience with attack and killchain analysis standard frameworks
- Strong understanding of endpoint security technologies, proven experience in computer security architecture and low-level systems security.
Threat Analysis and Research Skills
- Ability to analyse malware, vulnerabilities, exploit behaviours, attack methods and proof-of-concept material to assess risk, maturity and impact.
- Ability to find details on attacks and vulnerabilities and gather information from public sources.
- Experience analysing qualitative and quantitative cyber threat data is desirable.
- Knowledge of scripting languages such as Python.
Analysis, Documentation and Knowledge Management Skills
- Strong ability to synthesise complex information into structured documentation aimed at the relevant stakeholders.
- Experience writing clear technical analysis documents, and authoring technical reports.
Communication and External Engagement Skills
- Excellent writing skills and an ability to convey technical knowledge to both technical experts and non-technical audiences.
- Strong verbal communication skills, including the ability to brief customers, contribute to conference material, support media-facing narratives and partner with marketing and communications teams.
- Previous experience publishing technical reports, blogs or external threat research content is highly desirable.
The following skills and attributes are a plus
- Engineering-level knowledge in systems security.
- Knowledge of PC hardware and firmware architecture and technologies, including x86, ARM, UEFI, PCIe and DMA.
- Knowledge of OS kernel and hypervisor security.
- Knowledge of enterprise IT, device security and security management.
- Some experience in attack analysis, penetration testing or exploit kits, such as Metasploit.
- Experience in malware analysis, vulnerability research, attack reproduction or attack demonstration.
- Experience with scripting languages is required. C or C++ coding is a plus.
- Experience writing and presenting about offensive security, platform security or threat research topics.
- Degree in Electronic Engineering, Computer Science, Cybersecurity or a related field, or equivalent experience.
About HP
At HP, you’ll have a chance to create tools, technology, and solutions that reshape the way the world works in the future. If you’re looking to join a company that allows you to connect with a network of professionals eager to support you in doing your best work, we want to talk to you. Our legendary culture guides every employee toward success—fostering collaboration and driving innovation.


Get help with your application
Your very own career expert that helps elevate your application to the next level.
Operating in over 170 countries, HP is always creating new services, products, and capabilities giving you more opportunities to advance your career. Here, innovation is the key to professional development and career mobility.
When you join HP, you’re joining a company that believes every voice matters and that we all deserve a seat at the table. From the boardroom to factory floor, we create a culture where everyone is respected and where people can be themselves. You will be part of a global laboratory where different perspectives and experiences will help you solve problems in new ways. This is where you can build a long and wide-ranging career.
Equal Opportunity Employer
HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).
Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.
For more information, review HP’s EEO Policy or read about your rights as an applicant under the law here: “Know Your Rights: Workplace Discrimination is Illegal".
You can find out more about HP or go to the careers site to explore other opportunities.
Job Details
- Engineering
- Schedule: Full time
- Shift: No shift premium (United Kingdom)
- Travel:
- Relocation:
- Equal Opportunity Employer (EEO): HP, Inc. provides equal employment opportunity to all employees and prospective employees, without regard to race, color, religion, sex, national origin, ancestry, citizenship, sexual orientation, age, disability, or status as a protected veteran, marital status, familial status, physical or mental disability, medical condition, pregnancy, genetic predisposition or carrier status, uniformed service status, political affiliation or any other characteristic protected by applicable national, federal, state, and local law(s).
Please be assured that you will not be subject to any adverse treatment if you choose to disclose the information requested. This information is provided voluntarily. The information obtained will be kept in strict confidence.
For more information, review HP’s EEO Policy or read about your rights as an applicant under the law here: “Know Your Rights: Workplace Discrimination is Illegal".
“It took my CV and asked me questions relevant to understanding what kind of jobs to suggest for me. Suggestions were almost perfect. Jobs were exactly what I’ve been looking for.”
Jessica, London
Skills
Location