Senior Malware Analyst - Shape Global Threat Intelligence

Recorded Future; Göteborgs kommun; On-site; SEK 750,000 - 900,000; Full time

Job summary

Recorded Future is seeking a Senior Malware Analyst to join the team behind the Triage malware analysis sandbox. You will analyze the latest malware samples, implement signatures, YARA rules, and features to enhance operational intelligence used by security teams worldwide.

Your work will span static/dynamic analysis across Windows, macOS, and Android, with emphasis on robust detections and reliable indicators such as C2s and campaigns.

Qualifications

• Experience analyzing malware samples and writing detection content.
• Proficiency in creating YARA rules and detection logic.
• Background in sandbox environments and malware research methodologies.

Responsibilities

• Triage and investigate samples surfaced by the sandbox to discover new and emerging malware families.
• Perform static and dynamic analysis across Windows, macOS, and Android.
• Write and maintain YARA rules for malware families and variants.
• Develop configuration extractors to pull actionable intelligence from samples.
• Validate and tune detections to minimize false positives.
• Improve analysis tooling and sandbox features based on research insights.
• Contribute to public or private detection rule sets.

Skills

Malware analysis

YARA rules

Sandbox tooling

Go language

Assembly

Windows internals

Android internals

macOS internals

Config extractors

Threat detection

Tools

Go programming language

Job description

Recorded Future is seeking a Senior Malware Analyst to join the team behind the Triage malware analysis sandbox. You will analyze the latest malware samples, implement signatures, YARA rules, and features to enhance operational intelligence used by security teams worldwide.

Your work will span static/dynamic analysis across Windows, macOS, and Android, with emphasis on robust detections and reliable indicators such as C2s and campaigns.