Threat Researcher

The role

The Threat Researcher will perform threat intelligence research and reverse-engineer samples. This role involves analyzing malicious samples and sharing findings with the public.

What you will do

• Perform hands-on static and dynamic analysis of malicious samples
• Perform threat intelligence operations to collect and vet knowledge
• Contribute to signature creation activities and TI infrastructure
• Contribute to technical material shared with the public
• Engage with the marketing team
• Propose and drive new ideas
• Present findings at technical conferences

Required qualifications

• Proven hands-on experience with both static and dynamic malware analysis
• Experience working in isolated/sandboxed environments
• Demonstrated experience analysing Windows malware
• Solid understanding of the Windows executable format (PE) and common execution, persistence, and evasion techniques
• A proven record of previous presentations at conferences
• Proven experience in reverse engineering using analysis tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similar
• A solid understanding of binary file attributes such as executable structures and packers
• Familiarity with the MITRE ATT&CK framework and cyber kill chains
• Understanding of the OSI model and an ability to use Wireshark
• The attitude to operate in environments including data covered by non-disclosure agreements and a high level of confidentiality

Nice to have

• Experience analysing malware in Linux environments, including familiarity with the ELF format and Linux-specific persistence and execution techniques
• Previous professional experience as a Security Researcher, Detection Engineer, SOC Analyst, or Threat Hunter

Benefits

• Health & Wellness
• Financial
• Work-Life Balance
• Unparalleled Flexible Time-Off

Before you apply

• Successful candidates will be subjected to background verification checks

About the company

Nozomi Networks is the leader in OT and IoT Cybersecurity. They protect critical infrastructure, industrial and government organizations from cyber threats.