Threat Researcher

About this role

Now is an amazing time to join Nozomi Networks as we build the future of OT and IoT cybersecurity. We defend some of the world’s largest organizations and critical infrastructure in more than 68 countries and we’re just getting started. Our AI-powered cybersecurity platform secures operational technology (OT) and Internet of Things (IoT) infrastructures for enterprises and government entities across energy, manufacturing, transportation, resources, and critical infrastructure.

As we expand our product portfolio and global presence, our Security Research department is hiring a Threat Researcher to perform threat intelligence research and reverse-engineer samples providing better protection to the customers and sharing the findings with the public. You could be the next "Nozomier"! If this sounds like you, read on. In this role, you will: • Perform hands-on static and dynamic analysis of malicious samples to understand their behaviour, capabilities, and intent • Perform threat intelligence operations to collect and vet all the required knowledge to respond efficiently to advanced threats • Contribute to the signature creation activities and help us shape the TI infrastructure • Contribute to the technical material shared with the public and be actively engaged with the marketing team • Be an active team player, independently proposing and driving new ideas • Present our findings at technical conferences • Embody the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust To be successful in this opportunity, you will have: • Proven hands-on experience with both static and dynamic malware analysis, including working in isolated/sandboxed environments • Demonstrated experience analysing Windows malware, including a solid understanding of the Windows executable format (PE) and common execution, persistence, and evasion techniques • Experience analysing malware in Linux environments, including familiarity with the ELF format and Linux-specific persistence and execution techniques, is a strong advantage • A proven record of previous presentations at conferences • Proven experience in reverse engineering using analysis tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similar • A solid understanding of binary file attributes such as executable structures and packers • Familiarity with the MITRE ATT&CK framework and cyber kill chains • Understanding of the OSI model and an ability to use Wireshark • The attitude to operate in environments including data covered by non-disclosure agreements and a high level of confidentiality These qualifications would be a strong plus: • Previous professional experience as a Security Researcher, Detection Engineer, SOC Analyst, or Threat Hunter Who we are and what we stand for: Nozomi Networks is the leader in OT and IoT Cybersecurity.