Malware Analyst

Tech Ladies®; Gerona; Presencial; EUR 55.000 - 85.000; Jornada completa

Descripción de la vacante

Nozomi Networks, a leader in OT and IoT cybersecurity, is seeking a Malware Analyst in Spain to perform hands-on malware analysis, build detection signatures, and contribute to threat intelligence activities. You will work in a team that values transparency and trust while protecting critical infrastructure.

The role requires expertise in static/dynamic analysis, Windows PE and Linux ELF, reverse engineering, and a strong grasp of MITRE ATT&CK.

Formación

• Previous professional experience as a Detection Engineer, SOC Analyst, or Threat Hunter.
• Proven hands-on experience with static and dynamic malware analysis in isolated/sandboxed environments.
• Experience analysing Windows malware, including understanding of PE and common execution/persistence/evasion techniques.
• Experience analysing malware in Linux environments, including ELF format and Linux persistence/execution techniques.
• Proven reverse engineering experience using tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, or radare2.
• Understanding of binary file attributes such as executable structures and packers.
• Experience creating detection signatures such as YARA, Snort or Suricata, STIX, and SIGMA.
• Familiarity with MITRE ATT&CK framework and cyber kill chains.
• Understanding of OSI model and ability to use Wireshark.
• Working knowledge of Python.
• Capacity to operate under NDA and confidentiality.

Responsabilidades

• Perform hands-on static and dynamic analysis of malicious samples to understand behaviour, capabilities and intent.
• Create and tune detection rules within our product.
• Conduct threat intelligence operations to gather knowledge for timely response to advanced threats.
• Occasionally contribute to technical material shared publicly.
• Uphold Nozomi Networks' cultural pillars and commitment to transparency and trust.

Conocimientos

Malware analysis

Static analysis

Dynamic analysis

Windows PE

Linux ELF

Reverse engineering

YARA/Sigma rules

MITRE ATT&CK

Wireshark

Python

Public material writing

Herramientas

IDA Pro

Ghidra

OllyDBG

x64dbg

radare2

Descripción del empleo

Posted on Aug 19, 2026

Malware Analyst

Spain

Milan

Nozomi Networks

Nozomi Networks is the leader in OT and IoT cybersecurity, keeping the world's critical infrastructure cyber resilient through real-time asset visibility, threat detection, and AI-powered analysis. We protect the toughest operational environments — from energy and healthcare to manufacturing and beyond.

Job Description

As we expand our product portfolio and global presence, our Security Research department is hiring a Malware Analyst to produce accurate threat intelligence and reverse-engineered samples that power solid, reliable detection signatures.

You could be the next "Nozomier"! If this sounds like you, read on.

In This Role, You Will:

• Perform hands-on static and dynamic analysis of malicious samples to understand their behaviour, capabilities, and intent
• Create and tune various detection rules within our product
• Perform threat intelligence operations to collect and vet all the required knowledge to respond efficiently to advanced threats
• Occasionally contribute to the technical material shared with the public
• Embody the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust

To Be Successful In This Opportunity, You Will Have:

• Previous professional experience as a Detection Engineer, SOC Analyst, or Threat Hunter
• Proven hands-on experience with both static and dynamic malware analysis, including working in isolated/sandboxed environments
• Demonstrated experience analysing Windows malware, including a solid understanding of the Windows executable format (PE) and common execution, persistence, and evasion techniques
• Experience analysing malware in Linux environments, including familiarity with the ELF format and Linux-specific persistence and execution techniques is a strong advantage
• Proven experience in reverse engineering using analysis tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similar
• A solid understanding of binary file attributes such as executable structures and packers
• Experience creating detection signatures such as YARA, Snort or Suricata, STIX, and SIGMA
• Familiarity with the MITRE ATT&CK framework and cyber kill chains
• Understanding of the OSI model and an ability to use Wireshark
• Working knowledge of Python
• The attitude to operate in environments including data covered by non-disclosure agreements and a high level of confidentiality