Cyber Threat Analyst

Nozomi Networks Inc.; Sassari; On-site; EUR 90,000 - 120,000; Full time

Benefits offered by this job

Work-Life Balance

Unparalleled Flexible Time-Off

Job summary

Nozomi Networks Inc. is seeking a hands-on malware analyst to join its Security Research team. The role focuses on static and dynamic analysis of Windows and Linux malware, building indicators, and contributing to TI infrastructure to protect OT/IoT environments.

You will share technical findings publicly and collaborate with marketing and cross-functional teams. The ideal candidate has experience reverse engineering with IDA Pro, Ghidra, and other tools, familiarity with MITRE ATT&CK, and a

Qualifications

• Hands-on malware analysis of Windows and Linux samples.
• Experience with static and dynamic analysis in isolated environments.
• Familiarity with MITRE ATT&CK framework and cyber kill chains.
• Ability to present findings at conferences and collaborate cross-functionally.
• Familiarity with MITRE ATT&CK and cyber kill chains.
• Understanding of the OSI model and ability to use Wireshark.
• Ability to operate in NDA-protected, high-confidentiality environments.

Responsibilities

• Perform static and dynamic analysis of malicious samples to understand behavior, capabilities, and intent.
• Run threat intelligence operations to gather and validate knowledge for responding to advanced threats.
• Contribute to signature creation and help shape the threat intelligence infrastructure.
• Create technical material for public dissemination and coordinate with the marketing team.
• Present findings at technical conferences.
• Work with cross-functional teams to align security program with organizational goals.

Skills

Malware analysis

Threat intelligence

Team collaboration

Independent thinking

Effective communication

Windows malware analysis

Linux malware analysis

Reverse engineering

MITRE ATT&CK familiarity

Wireshark proficiency

Tools

IDA Pro

Ghidra

OllyDbg

x64dbg

radare2

Job description

In this role you will conduct hands-on malware analysis and threat intelligence work to protect OT/IoT environments. You’ll work within the Security Research team to understand malicious behavior, craft indicators, and contribute to TI infrastructure. You will share technical findings publicly and collaborate with marketing, conferences, and cross-functional teams. The position offers the chance to impact critical infrastructure security at scale and participate in shaping a transparent, trusted security program.

• Work-Life Balance
• Unparalleled Flexible Time-Off
• Perform static and dynamic analysis of malicious samples to understand behavior, capabilities, and intent
• Run threat intelligence operations to gather and validate knowledge for responding to advanced threats
• Contribute to signature creation and help shape the threat intelligence infrastructure
• Create technical material for public dissemination and coordinate with the marketing team
• Act as a proactive team player, proposing and driving new ideas
• Present findings at technical conferences
• Uphold Nozomi Networks' Cultural Pillars and mission of transparency and trust
• Hands-on experience with static and dynamic malware analysis in isolated environments
• Experience analyzing Windows malware; knowledge of PE format and common techniques
• Familiarity with Linux malware analysis (ELF format) and Linux-specific techniques (advantage)
• Track record of presenting at conferences
• Experience reverse engineering with IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similar
• Understanding of binary file attributes, executables, and packers
• Familiarity with MITRE ATT&CK framework and cyber kill chains
• Understanding of the OSI model and ability to use Wireshark
• Ability to operate in NDA-protected and high-confidentiality environments
• team collaboration
• initiative and independent thinking
• effective communication
• static and dynamic malware analysis
• ELF format and Linux persistence/execution techniques