Associate Principal Malware Analyst

This is a fully remote position, open to applicants in United States.

📋 Description

• Identify and evaluate advanced threats targeting Industrial Control Systems (ICS) and critical infrastructure, assessing their operational impact and severity.

• Innovate and implement analytical methods while performing advanced reverse engineering and deobfuscation of malware, software, and firmware specific to ICS.

• Develop Yara signatures and collaborate closely with detection engineers to create unique threat detections tailored for ICS.

• Produce technical reports for customers and internal documentation that simplify complex malware findings into understandable operational impacts.

• Enhance and advance the malware analysis workflow by incorporating new methods and procedures.

• Work alongside hunters, intelligence analysts, and detection engineers to propel malware-related threat research and tackle intricate technical challenges.

• Utilize independent judgment in choosing analytical techniques and act as a reliable technical advisor on complex questions regarding malware analysis and detection.

⛳️ Requirements

• 5-8 years of experience in malware analysis, reverse engineering, or a related field within ICS/OT cybersecurity.

• Advanced skills in static and dynamic malware reverse engineering using tools like disassemblers, debuggers, and decompilers (e.g., IDA Pro, Ghidra, x64dbg).

• Proven experience analyzing software, firmware, and embedded systems specific to ICS.

• Strong capabilities in Yara signature development, along with experience in creating detection analytics for novel malware and attack strategies.

• Established ability to craft clear and compelling technical reports for customers regarding complex malware findings.

• Experience in contributing to or enhancing a malware analysis pipeline, tools, or workflows.

• Proficient in collaborating with detection engineers, hunters, and intelligence analysts on technical issues across teams.

• Familiarity with ICS/OT protocols, threat groups, and the wider landscape of critical infrastructure threats is highly advantageous.

• All new hires are required to pass a background check as a condition of employment.

🏝️ Benefits

• Competitive Equity Package

• Comprehensive Benefits Plan

• Remote-first work environment