Associate Principal Malware Analyst

Accountabilities:
As an Associate Principal Malware Analyst, you will lead advanced malware research and contribute to the development of detection capabilities that protect industrial and critical infrastructure environments. You will work across technical teams to analyze emerging threats, improve malware analysis processes, and translate complex findings into actionable intelligence. Identify, investigate, and assess sophisticated threats targeting industrial control systems (ICS) and operational technology (OT) environments, evaluating potential business and operational impact. Perform advanced malware reverse engineering, including static and dynamic analysis, deobfuscation, and research of software, firmware, and embedded systems. Develop YARA signatures and collaborate with detection teams to create effective threat detection strategies based on malware research findings. Produce clear, technically accurate reports and documentation that communicate complex malware analysis results to technical and non-technical audiences. Improve malware analysis workflows, tools, and methodologies to address evolving attacker techniques and emerging threats. Partner with threat hunters, intelligence analysts, and detection engineers to solve complex cybersecurity challenges and advance defensive capabilities. Provide technical guidance and independent expertise on malware analysis, detection engineering, and threat research initiatives. Requirements: The ideal candidate brings strong malware analysis experience, advanced reverse engineering skills, and the ability to operate in a highly technical cybersecurity environment. You should be comfortable solving complex problems, collaborating across teams, and communicating technical findings effectively. 5+ years of experience in malware analysis, reverse engineering, or a related cybersecurity discipline, preferably within ICS/OT environments. Advanced experience with malware analysis tools such as IDA Pro, Ghidra, x64dbg, debuggers, disassemblers, and decompilers. Demonstrated ability to analyze ICS-specific software, firmware, embedded systems, and sophisticated malware threats. Strong experience developing YARA rules and detection analytics for new malware families and attack techniques. Proven ability to write technical reports that clearly explain complex security findings and their operational impact. Experience improving malware analysis pipelines, tooling, automation, or research workflows. Ability to collaborate effectively with security researchers, detection engineers, threat hunters, and intelligence teams. Knowledge of ICS/OT protocols, critical infrastructure threats, and adversary groups is highly valued. Strong analytical thinking, problem-solving abilities, and independent judgment. Excellent written and verbal communication skills with the ability to influence technical stakeholders. Benefits: Competitive salary of approximately $182,000 USD. Competitive equity package. Comprehensive benefits plan supporting employee well-being. Remote-first work environment with flexibility across locations. Opportunity to work on cybersecurity challenges protecting essential infrastructure worldwide. Collaboration with a global team of security experts across multiple regions. Mission-driven culture focused on innovation, transparency, and meaningful impact.

How Jobgether works:
We use an AI-powered matching process to ensure your application is reviewed quickly, objectively, and fairly against the role's core requirements. Our system identifies the top-fitting candidates, and this shortlist is then shared directly with the hiring company. The final decision and next steps (interviews, assessments) are managed by their internal team.
We appreciate your interest and wish you the best!
 Why Apply Through Jobgether? 
 
Data Privacy Notice: By submitting your application, you acknowledge that Jobgether will process your personal data to evaluate your candidacy and share relevant information with the hiring employer. This processing is based on legitimate interest and pre-contractual measures under applicable data protection laws (including GDPR). You may exercise your rights (access, rectification, erasure, objection) at any time.
 
 
#LI-CL1