Remote Principal Malware Analyst — ICS/OT Defense

dragos; United States; Remote; USD 164,000 - 200,000; Full time

Benefits offered by this job

Competitive Equity Package

Comprehensive Benefits Plan

Job summary

Dragos is seeking an Associate Principal Malware Analyst to lead deep-dive analysis of ICS/OT threats, develop novel detection methods, and produce Yara signatures and technical reports that translate findings into action.

You’ll partner closely with detection engineers, hunters, and intelligence analysts to turn your research into deployable defenses while helping refine the malware analysis pipeline itself.

Qualifications

• 5–8 years of experience in malware analysis, reverse engineering, or a related ICS/OT cybersecurity discipline.
• Advanced proficiency in static and dynamic malware reverse engineering using tools such as disassemblers, debuggers, and decompilers (e.g., IDA Pro, Ghidra, x64dbg).
• Demonstrated experience analyzing ICS/OT-specific software, firmware, and embedded systems.
• Strong Yara signature development skills, with experience building detection analytics for novel malware and attack techniques.
• Proven ability to write clear, persuasive, customer-facing technical reports on complex malware findings.
• Experience contributing to or improving a malware analysis pipeline, tooling, or workflow.
• Familiarity with ICS/OT protocols, threat groups, and the broader critical infrastructure threat landscape is a major plus.

Responsibilities

• Identify and assess highly sophisticated threats targeting ICS/OT and critical infrastructure.
• Develop analysis methods and conduct advanced reverse engineering and deobfuscation of ICS/OT-specific malware, software, and firmware.
• Create Yara signatures and partner closely with detection engineers to develop novel, ICS/OT-specific threat detections informed by deep malware analysis findings.
• Write persuasive customer-facing technical reports and internal documentation that translates complex malware findings into clear operational impact for diverse audiences.
• Refine and evolve the malware analysis pipeline with new methods and procedures to address emerging techniques and tooling as they surface in the threat landscape.
• Collaborate across teams—with hunters, intelligence analysts, and detection engineers—to drive malware-related threat research and solve complex technical problems.
• Exercise independent judgment in selecting analytical methods and serve as a trusted technical advisor on complex malware analysis and detection questions across the organization.

Skills

Malware analysis

Reverse engineering

Yara signature development

Technical reporting

Tools

IDA Pro

Ghidra

x64dbg

Job description

Dragos is seeking an Associate Principal Malware Analyst to lead deep-dive analysis of ICS/OT threats, develop novel detection methods, and produce Yara signatures and technical reports that translate findings into action.

You’ll partner closely with detection engineers, hunters, and intelligence analysts to turn your research into deployable defenses while helping refine the malware analysis pipeline itself.