Threat Intelligence Analyst - Malware & APT Research

ThreatLocker Inc.; Orlando (FL); On-site; USD 90,000 - 130,000; Full time

Job summary

The analyst will authors blogs and finished intelligence reports, leverage telemetry to address detection gaps, and collaborate with Detection Engineering to enhance ThreatLocker Detect coverage. This is an in‑office position in Orlando.

Qualifications

• Minimum of 3 years of experience in Information Security.
• Minimum of 2 years of experience in malware analysis, reverse engineering, or related discipline.
• Familiarity with malware analysis and reverse engineering tools (IDA Pro, Binary Ninja, Detect It Easy, x64dbg, Malcat, HxD).
• Experience with Windows operating systems and forensic artifacts.
• Knowledge of MITRE ATT&CK framework and its enterprise application.
• Excellent written and verbal communication skills; ability to explain complex concepts to non-technical stakeholders.
• Content development or technical writing experience preferred.

Responsibilities

• Identify and investigate new and emerging cybersecurity threats.
• Track APT adversaries and characterize TTPs.
• Conduct malware analysis, reverse engineering, infrastructure investigations, and campaign research.
• Analyze artifacts and telemetry to identify malicious activity.
• Author high-impact technical blog posts and finished intelligence reports.
• Collaborate with Detection Engineering team to improve threat detection coverage.
• Communicate complex threat intelligence to technical and non-technical stakeholders.
• Provide insights regarding product functionality and roadmap considerations.
• Manage multiple research priorities and meet deadlines.

Skills

Malware analysis

Reverse engineering

Threat hunting

Windows forensics

MITRE ATT&CK

Technical writing

Communication

Tools

IDA Pro

Binary Ninja

Detect It Easy

x64dbg

Malcat

HxD

Job description

The analyst will authors blogs and finished intelligence reports, leverage telemetry to address detection gaps, and collaborate with Detection Engineering to enhance ThreatLocker Detect coverage. This is an in‑office position in Orlando.