Threat Intelligence Researcher - Flexible Time-Off

Cacheflow; Mendrisio; Vor Ort; CHF 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Health & Wellness

Financial

Work-Life Balance

Unparalleled Flexible Time-Off

Zusammenfassung

Nozomi Networks is seeking a Threat Researcher to advance our threat intelligence research and reverse-engineer samples to improve protection for customers and the public. You will analyze malware, develop signatures, and contribute to TI infrastructure in a collaborative team.

You should have hands-on malware analysis in Windows and Linux environments, experience with IDA Pro or Ghidra, and the ability to present findings at conferences while aligning with our cultural pillars of transparency

Qualifikationen

• Hands-on experience with static and dynamic malware analysis in isolated environments.
• Experience analysing Windows malware and PE format, persistence and evasion techniques.
• Experience analysing malware in Linux environments (ELF format) and Linux persistence/execution techniques.
• Proven record of conference presentations.
• Reverse engineering using tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, or radare2.
• Understanding of binary file attributes and packers.
• Familiarity with MITRE ATT&CK framework and cyber kill chains.
• Understanding of the OSI model and ability to use Wireshark.
• Ability to operate in environments with NDA constraints and high confidentiality.

Aufgaben

• Perform hands-on static and dynamic analysis of malicious samples to understand their behaviour, capabilities, and intent.
• Perform threat intelligence operations to collect and vet knowledge to respond to advanced threats.
• Contribute to signature creation activities and help shape TI infrastructure.
• Contribute to technical material shared with the public and work with the marketing team.
• Be an active team player, independently proposing and driving new ideas.
• Present our findings at technical conferences.
• Uphold Nozomi Networks' Pillars and mission with transparency and trust.

Kenntnisse

Malware analysis

Static analysis

Dynamic analysis

Windows malware

Linux malware

Reverse engineering

IDA Pro

Ghidra

MITRE ATT&CK

Public speaking

Wireshark

Tools

IDA Pro

Ghidra

OllyDBG

x64dbg

radare2

Jobbeschreibung

Nozomi Networks is seeking a Threat Researcher to advance our threat intelligence research and reverse-engineer samples to improve protection for customers and the public. You will analyze malware, develop signatures, and contribute to TI infrastructure in a collaborative team.

You should have hands-on malware analysis in Windows and Linux environments, experience with IDA Pro or Ghidra, and the ability to present findings at conferences while aligning with our cultural pillars of transparency