Senior Threat Researcher – Behavioral Protection

This is a fully remote position, open to applicants in Canada.

📋 Description

• Evaluate malware behaviors in accordance with MITRE ATT&CK TTPs (and beyond), encompassing the entire attack lifecycle, such as initial access methods, execution techniques, and payload delivery—with a particular emphasis on in-memory tactics, fileless malware, and evasive strategies.

• Investigate and pinpoint behavioral techniques utilized by emerging and advanced Persistent Threats (APTs) and convert these findings into effective behavioral protection rules to strengthen prevention capabilities.

• Enhance protection coverage for zero-day malware and innovative attack strategies.

• Operate independently with minimal oversight while prioritizing protection tasks effectively.

• Assess and offer actionable insights on detection logic and code created by other researchers.

• Collaborate with the team to establish clear protection priorities and promptly update customers.

• Create high-quality threat analysis reports for both internal and external stakeholders.

⛳️ Requirements

• Demonstrated hands-on experience in analyzing Windows-based malware using both static and dynamic analysis tools, such as IDAPro and Windbg.

• Profound understanding of behavioral techniques, memory injection methods, persistence mechanisms, and evasion strategies.

• Capability to develop robust, high-quality behavioral protection rules.

• Proven programming experience, preferably in Python or Lua.

• Experience in a fast-paced threat research or security operations setting.

• Excellent communication skills and the ability to provide technical mentorship to colleagues.

• Proactive and self-motivated mindset with the capability to lead during critical incidents or zero-day response situations.

🏝️ Benefits

• Sophos implements a remote-first work model, making remote work the primary option for most employees, although some roles may require a hybrid approach.

• Our people drive innovation and creativity, all accompanied by a strong sense of fun and team spirit.

• Employee-led diversity and inclusion networks that foster community and provide education and advocacy.

• Annual charity and fundraising initiatives, along with volunteer days for employees to engage with local communities.

• Global employee sustainability initiatives aimed at reducing our environmental footprint.

• Global fitness and trivia competitions designed to keep our bodies and minds sharp.

• Global wellbeing days for employees to relax and recharge.

• Monthly wellbeing webinars and training sessions to support employee health and wellness.