Malware Intelligence Analyst

Jobgether; France; Remote; EUR 70,000 - 110,000; Full time

Benefits offered by this job

Fully remote

5-day workweek

Vacation days 24

National holidays 10

Unlimited sick leave

Private medical insurance

Co-working space reimbursement

Gym reimbursement

Patent rewards program

Structured onboarding

Job summary

Jobgether on behalf of a partner company seeks a Malware Intelligence Analyst in France. You will reverse-engineer real-world web malware, extract detection patterns, and craft PCRE-based signatures for production scanners. Join a 24/7 globally distributed malware team and influence tooling and automation across time zones.

The role is fully remote with a fixed schedule aligned to your time zone, offering substantial vacation and holiday benefits, plus options for ongoing professional growth.

Qualifications

• 3+ years of experience with PHP and/or JavaScript, able to read and analyze malicious code.
• Strong expertise in PCRE regex, including advanced constructs and performance.
• Experience with web malware reverse engineering, deobfuscation, and payload unpacking.
• Familiarity with common web attack vectors and hosting environments.
• English proficiency (upper-intermediate or higher).
• Experience with WordPress internals, incident response, penetration testing, Python scripting, YARA rules, or hosting control panels.

Responsibilities

• Analyze, classify, and prioritize web-based malware threats.
• Reverse-engineer PHP and JavaScript to uncover attacker techniques and patterns.
• Develop high-precision PCRE-based detection signatures for production scanners.
• Maintain 24/7 malware coverage as part of a globally distributed team.
• Research CMS exploitation techniques and supply-chain compromises.
• Contribute to improving tooling and automation for detection efficiency.

Skills

PCRE regex

PHP

JavaScript

Reverse engineering

Deobfuscation

Payload unpacking

Web security

English proficiency

Tools

YARA rules

cPanel

Plesk

DirectAdmin

Job description

This position is posted by Jobgether on behalf of a partner company. We are currently looking for a Malware Intelligence Analyst in France. This is an exciting opportunity to join a globally distributed cybersecurity team protecting hundreds of thousands of web servers from evolving online threats. As a Malware Intelligence Analyst, you will reverse-engineer real-world web malware, uncover attacker techniques, and transform your findings into high-precision detection signatures. Your work will directly contribute to safeguarding websites ranging from small CMS deployments to large-scale infrastructure environments. Operating within a 24/7 malware processing pipeline, you’ll collaborate across time zones to ensure rapid threat response and continuous coverage. This fully remote role offers a fixed schedule aligned with your time zone, empowering you to deliver meaningful impact while maintaining balance. If you are passionate about dissecting malicious code and strengthening web security at scale, this role offers both challenge and purpose.

Accountabilities

• Analyze, classify, and prioritize web-based malware threats, including obfuscated PHP backdoors, JavaScript injections, SEO spam, redirectors, and cryptominers targeting hosting environments.
• Reverse-engineer malicious PHP and JavaScript code to uncover attacker techniques and extract reliable detection patterns.
• Develop, test, and refine high-precision PCRE-based detection signatures for production scanning engines, minimizing false positives while maximizing coverage.
• Maintain strict service-level agreements (SLAs) as part of a globally distributed team providing continuous 24/7 malware coverage.
• Research emerging attack vectors such as CMS exploitation techniques, plugin/theme supply-chain compromises, and zero-day delivery methods.
• Contribute to improving internal processes, tooling, and automation to enhance detection efficiency and scalability.

Requirements

• Strong expertise in PCRE regex, including advanced constructs, performance optimization, and accurate pattern design.
• Minimum 3 years of experience working with PHP and/or JavaScript, with the ability to read, analyze, and differentiate between legitimate and malicious code.
• Hands-on experience with web malware reverse engineering, deobfuscation techniques, and payload unpacking.
• Solid understanding of common web attack vectors (e.g., injection attacks, XSS, RCE, file upload exploits) and their behavior in hosting environments.
• Familiarity with web server architectures and shared hosting ecosystems (Apache, Nginx, LiteSpeed, reverse proxies, PHP handlers, WAFs, Linux file systems, namespaces, cgroups).
• Upper-intermediate or higher English proficiency.
• Additional assets include experience with WordPress internals, website incident response, penetration testing, Python scripting, YARA rules, or hosting control panels (cPanel, Plesk, DirectAdmin).
• Strong analytical thinking, curiosity about attacker methodologies, and the ability to work independently in a remote environment.

Benefits

• Fully remote position with a fixed 5-day workweek (5 on / 2 off) aligned with your time zone — no mandatory rotation.
• 24 paid vacation days annually, plus 10 national holidays and unlimited sick leave.
• Additional compensation or extra vacation days for weekends and public holidays worked within your schedule.
• Private medical insurance compensation.
• Co-working space and gym/sports reimbursement.
• Performance-based recognition, including rewards for innovative ideas eligible for patenting.
• Structured onboarding and modern tooling to support continuous professional growth.