Malware Analyst & Threat Hunter — Flexible Time Off

Nozomi Networks; Madrid; Presencial; EUR 42.000 - 68.000; Jornada completa

Ventajas ofrecidas por este puesto de trabajo

Work-Life Balance

Unparalleled Flexible Time-Off

Descripción de la vacante

Nozomi Networks is seeking a Malware Analyst to produce accurate threat intelligence and reverse-engineered samples that power solid, reliable detection signatures for OT and IoT cybersecurity across diverse environments.

You will perform hands-on static and dynamic analysis of malicious samples, create and tune detection rules, contribute to threat intelligence operations, and share technical material with the public while upholding confidentiality.

Formación

• Minimum hands-on experience with malware analysis (static and dynamic) in isolated/sandboxed environments.
• Experience reverse engineering binaries and understanding PE/ELF structures and obfuscation techniques.
• Familiarity with malware analysis across Windows and Linux environments and related tooling.

Responsabilidades

• Perform hands-on static and dynamic analysis of malicious samples to understand behaviour and capabilities.
• Create and tune various detection rules within our product.
• Conduct threat intelligence operations to collect knowledge for rapid response to advanced threats.
• Occasionally contribute to technical material shared publicly.
• Represent Nozomi Networks with confidentiality and integrity in all work.

Conocimientos

Malware analysis (static & dynamic)

Reverse engineering

Threat hunting / SOC analysis

Detection rule tuning

YARA / Snort / Suricata / SIGMA

MITRE ATT&CK familiarity

Wireshark & OSI model

Python scripting

Herramientas

IDA Pro

Ghidra

OllyDbg

x64dbg

radare2

Descripción del empleo

Nozomi Networks is seeking a Malware Analyst to produce accurate threat intelligence and reverse-engineered samples that power solid, reliable detection signatures for OT and IoT cybersecurity across diverse environments.

You will perform hands-on static and dynamic analysis of malicious samples, create and tune detection rules, contribute to threat intelligence operations, and share technical material with the public while upholding confidentiality.