Senior Software Engineer — Python exp is a must

SonicWall SLED; Bengaluru; On-site; INR 2,600,000 - 4,200,000; Full time

Job summary

SonicWall is seeking a Senior Software Engineer to join the Threat Detection Platform team, building scalable cloud-based services for malware analysis using static/dynamic techniques and ML. You will own core detection capabilities across platforms, including analysis engines and Windows sandbox environments.

Responsibilities include developing static/dynamic analysis, managing ML inference pipelines, and collaborating with cross-functional teams to improve performance and detection accuracy.

Qualifications

• 8+ years software engineering experience or 6+ with MS/PhD, BS with equivalent experience.
• Strong Python development including multithreading and performance tuning.
• Proficient in C/C++ with ability to read, debug, build and modify components.

Responsibilities

• Develop, optimize, and maintain static analysis capabilities (PE, Authenticode, YARA, macros, PDF, archives).
• Manage ML inference pipeline across products, including model integration and deployment.
• Own dynamic analysis environment; manage Windows VM lifecycle and telemetry collection.

Skills

Python

C/C++

Machine Learning

Linux

VM/KVM

Education

Bachelor's degree in Computer Science

Tools

YARA

Job description

SonicWall is a cybersecurity forerunner with more than 30 years of expertise and is recognized as a leading partner-first company, ensuring our partners and their customers are never alone in the fight against cybercrime. With the ability to build, scale and manage security across the cloud, hybrid and traditional environments in real-time, SonicWall provides relentless security against the most evasive cyberattacks across endless exposure points for increasingly remote, mobile and cloud-enabled users. With its own threat research center, SonicWall can quickly and economically provide purpose-built security solutions to enable any organization—enterprise, government agencies and SMBs—around the world. For more information, visit www.sonicwall.com or follow us on Twitter, LinkedIn, Facebook and Instagram.

Role Summary

We are seeking a Senior Software Engineer to join our Threat Detection Platform team and help build the next generation of malware detection and analysis technologies. This role focuses on developing scalable cloud-based services that analyze, classify, and process suspicious files using a combination of static analysis, dynamic analysis, and machine learning techniques.

Own the core detection capabilities across both platforms, including static and dynamic analysis engines, machine learning inference pipelines, compiled analysis components, and the Windows-based sandbox environment. Responsible for driving detection accuracy, platform reliability, and the evolution of analysis technologies that power threat verdicts.

Responsibilities

• Develop, optimize, and maintain static analysis capabilities, including PE and Authenticode signature validation, YARA scanning, Office macro analysis, PDF inspection, archive analysis, and cloud-based hash reputation lookups.
• Manage the machine learning inference pipeline across both products, including model integration, tuning, deployment, and version control within production services.
• Own and enhance the dynamic analysis environment, including Windows VM lifecycle management on KVM/libvirt, guest configuration, behavioral telemetry collection, and support for additional operating systems.
• Read, troubleshoot, enhance, and maintain C/C++-based analysis components that support platform detection capabilities.
• Improve detection effectiveness by developing new analysis engines, expanding file-type coverage, creating behavioral signatures, and increasing test coverage across detection workflows.
• Investigate and resolve production detection issues, including false positives, false negatives, engine failures, and sandbox-related issues.
• Participate in architectural discussions, design reviews, and code reviews to help maintain high engineering standards.
• Collaborate closely with cross-functional teams to continuously improve platform performance, reliability, and detection accuracy.

Requirements

• Minimum of 8 years of software engineering experience with a Bachelor's degree in Computer Science, Engineering, or a related field; alternatively, 6+ years with a Master's degree, 3+ years with a PhD, or equivalent professional experience.
• Strong Python development experience, including multithreaded programming and performance optimization.
• Working proficiency in C and C++, with the ability to read, debug, build, and modify compiled analysis components.
• Solid understanding of static file analysis techniques, including PE file structures, code-signing validation, YARA rules, Office macros, PDF formats, and archive file inspection.
• Experience deploying and maintaining machine learning inference solutions in production using frameworks such as PyTorch, LightGBM, scikit-learn, or ONNX, including feature engineering and model optimization.
• Familiarity with KVM/libvirt or similar virtualization technologies and a working knowledge of Windows internals, or the ability to quickly develop expertise in these areas.
• Experience with malware analysis, sandbox technologies, threat detection platforms, or cybersecurity software.
• Comfortable working in Linux environments, including process troubleshooting, log analysis, and shell scripting on Ubuntu or Debian-based systems.
• Strong written communication skills and the ability to collaborate effectively within a distributed, asynchronous team environment.

Cross-Team Coverage Expectations

• Contribute to a collaborative engineering environment where team members provide coverage across functional areas when needed.
• Provide maintenance-level support and first-line incident response outside primary areas of expertise, including Python-based services, distributed task processing systems, management APIs, and deployment infrastructure.
• Support operational continuity during teammate absences and partner with subject matter experts when deeper technical specialization is required.

#Python

#MYSQL

SonicWall is an equal opportunity employer.

We are committed to creating a diverse environment and are an equal opportunity employer. All qualified applicants receive consideration for employment without regard to race, color, ethnicity, religion, sex, gender, gender identity and expression, sexual orientation, national origin, disability, age, marital status, veteran status, pregnancy, or any other basis prohibited by applicable law.

At SonicWall, we pride ourselves on recruiting a diverse mix of talented people and providing active security solutions in 100+ countries.

Applicant Privacy Notice

Voluntary Self-Identification

For government reporting purposes, we ask candidates to respond to the below self-identification survey. Completion of the form is entirely voluntary. Whatever your decision, it will not be considered in the hiring process or thereafter. Any information that you do provide will be recorded and maintained in a confidential file.

As set forth in SonicWall’s Equal Employment Opportunity policy, we do not discriminate on the basis of any protected group status under any applicable law.

Gender

Select...

Are you Hispanic/Latino?

Select...

Race & Ethnicity Definitions

If You Believe You Belong To Any Of The Categories Of Protected Veterans Listed Below, Please Indicate By Making The Appropriate Selection. As a Government Contractor Subject To The Vietnam Era Veterans Readjustment Assistance Act (VEVRAA), We Request This Information In Order To Measure The Effectiveness Of The Outreach And Positive Recruitment Efforts We Undertake Pursuant To VEVRAA. Classification Of Protected Categories Is As Follows

A \"disabled veteran\" is one of the following: a veteran of the U.S. military, ground, naval or air service who is entitled to compensation (or who but for the receipt of military retired pay would be entitled to compensation) under laws administered by the Secretary of Veterans Affairs; or a person who was discharged or released from active duty because of a service-connected disability.

A \"recently separated veteran\" means any veteran during the three-year period beginning on the date of such veteran's discharge or release from active duty in the U.S. military, ground, naval, or air service.

An \"active duty wartime or campaign badge veteran\" means a veteran who served on active duty in the U.S. military, ground, naval or air service during a war, or in a campaign or expedition for which a campaign badge has been authorized under the laws administered by the Department of Defense.

An \"Armed forces service medal veteran\" means a veteran who, while serving on active duty in the U.S. military, ground, naval or air service, participated in a United States military operation for which an Armed Forces service medal was awarded pursuant to Executive Order 12985.

How do you know if you have a disability?

• Alcohol or other substance use disorder (not currently using drugs illegally)
• Autoimmune disorder, for example, lupus, fibromyalgia, rheumatoid arthritis, HIV/AIDS
• Blind or low vision
• Cancer (past or present)
• Cardiovascular or heart disease
• Celiac disease
• Cerebral palsy
• Deaf or serious difficulty hearing
• Diabetes
• Disfigurement, for example, disfigurement caused by burns, wounds, accidents, or congenital disorders
• Epilepsy or other seizure disorder
• Gastrointestinal disorders, for example, Crohn's Disease, irritable bowel syndrome
• Intellectual or developmental disability
• Mental health conditions, for example, depression, bipolar disorder, anxiety disorder, schizophrenia, PTSD
• Missing limbs or partially missing limbs
• Mobility impairment, benefiting from the use of a wheelchair, scooter, walker, leg brace(s) and/or other supports
• Nervous system condition, for example, migraine headaches, Parkinson’s disease, multiple sclerosis (MS)
• Neurodivergence, for example, attention-deficit/hyperactivity disorder (ADHD), autism spectrum disorder, dyslexia, dyspraxia, other learning disabilities
• Partial or complete paralysis (any cause)
• Pulmonary or respiratory conditions, for example, tuberculosis, asthma, emphysema
• Short stature (dwarfism)
• Traumatic brain injury

Disability Status

PUBLIC BURDEN STATEMENT: According to the Paperwork Reduction Act of 1995 no persons are required to respond to a collection of information unless such collection displays a valid OMB control number. This survey should take about 5 minutes to complete.

Page 1 of 1

Expires 07/31/2029