Threat Researcher

Cacheflow; Mendrisio; Vor Ort; CHF 120.000 - 180.000; Vollzeit

Benefits dieser Stelle

Health & Wellness

Financial

Work-Life Balance

Unparalleled Flexible Time-Off

Zusammenfassung

Nozomi Networks is seeking a Threat Researcher to advance our threat intelligence research and reverse-engineer samples to improve protection for customers and the public. You will analyze malware, develop signatures, and contribute to TI infrastructure in a collaborative team.

You should have hands-on malware analysis in Windows and Linux environments, experience with IDA Pro or Ghidra, and the ability to present findings at conferences while aligning with our cultural pillars of transparency

Qualifikationen

• Hands-on experience with static and dynamic malware analysis in isolated environments.
• Experience analysing Windows malware and PE format, persistence and evasion techniques.
• Experience analysing malware in Linux environments (ELF format) and Linux persistence/execution techniques.
• Proven record of conference presentations.
• Reverse engineering using tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, or radare2.
• Understanding of binary file attributes and packers.
• Familiarity with MITRE ATT&CK framework and cyber kill chains.
• Understanding of the OSI model and ability to use Wireshark.
• Ability to operate in environments with NDA constraints and high confidentiality.

Aufgaben

• Perform hands-on static and dynamic analysis of malicious samples to understand their behaviour, capabilities, and intent.
• Perform threat intelligence operations to collect and vet knowledge to respond to advanced threats.
• Contribute to signature creation activities and help shape TI infrastructure.
• Contribute to technical material shared with the public and work with the marketing team.
• Be an active team player, independently proposing and driving new ideas.
• Present our findings at technical conferences.
• Uphold Nozomi Networks' Pillars and mission with transparency and trust.

Kenntnisse

Malware analysis

Static analysis

Dynamic analysis

Windows malware

Linux malware

Reverse engineering

IDA Pro

Ghidra

MITRE ATT&CK

Public speaking

Wireshark

Tools

IDA Pro

Ghidra

OllyDBG

x64dbg

radare2

Jobbeschreibung

Now is an amazing time to join Nozomi Networks as we build the future of OT and IoT cybersecurity.

We defend some of the world’s largest organisations and critical infrastructure in more than 68 countries and we’re just getting started. Our AI-powered cybersecurity platform secures operational technology (OT) and Internet of Things (IoT) infrastructures for enterprises and government entities across energy, manufacturing, transportation, resources, and critical infrastructure.

As we expand our product portfolio and global presence, our Security Research department is hiring a Threat Researcher to perform threat intelligence research and reverse-engineer samples providing better protection to the customers and sharing the findings with the public.

You could be the next "Nozomier"! If this sounds like you, read on.

In this role, you will:

• Perform hands-on static and dynamic analysis of malicious samples to understand their behaviour, capabilities, and intent
• Perform threat intelligence operations to collect and vet all the required knowledge to respond efficiently to advanced threats
• Contribute to the signature creation activities and help us shape the TI infrastructure
• Contribute to the technical material shared with the public and be actively engaged with the marketing team
• Be an active team player, independently proposing and driving new ideas
• Present our findings at technical conferences
• Embod the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust

To be successful in this opportunity, you will have:

• Proven hands-on experience with both static and dynamic malware analysis, including working in isolated/sandboxed environments
• Demonstrated experience analysing Windows malware, including a solid understanding of the Windows executable format (PE) and common execution, persistence, and evasion techniques
• Experience analysing malware in Linux environments, including familiarity with the ELF format and Linux-specific persistence and execution techniques, is a strong advantage
• A proven record of previous presentations at conferences
• Proven experience in reverse engineering using analysis tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similar
• A solid understanding of binary file attributes such as executable structures and packers
• Familiarity with the MITRE ATT&CK framework and cyber kill chains
• Understanding of the OSI model and an ability to use Wireshark
• The attitude to operate in environments including data covered by non-disclosure agreements and a high level of confidentiality

These qualifications would be a strong plus:

• Previous professional experience as a Security Researcher, Detection Engineer, SOC Analyst, or Threat Hunter

Who we are and what we stand for:

Nozomi Networks is the leader in OT and IoT Cybersecurity. We protect the world's critical infrastructure, industrial and government organizations from cyber threats by providing exceptional network visibility, threat detection and operational insight. We’re always innovating and we hire the best at what they do to ensure our customers always have access to fast product enhancements, exceptional engineering support and rapid deployment across continents. If you like a challenge, and value integrity and customer success, we invite you to help Nozomi Networks build the future of OT and IoT cybersecurity.

Diversity, Inclusion and Belonging are part of our core beliefs, at Nozomi Networks. Diversity of thought, background and culture broadens our knowledge of the world and helps us learn, grow, and gain new perspectives. What makes us all different is what makes us powerful.

Our Global Benefits

• Health & Wellness
• Financial
• Work-Life Balance
• Unparalleled Flexible Time-Off

Need to know information

Successful candidates will be subjected to background verification checks.

If you would like to know more about our Privacy Policy, please click here. Any questions about how we process personal information, or if you would like help exercising your privacy rights please contact us using the email provided within the Privacy Policy.