SlipstreamJobs tracks this role from the company's public career site. Apply directly on the employer's site.
Nozomi Networks is hiring a Cyber Threat Analyst to join the Security Research department. The company is a leader in OT (operational technology) and IoT cybersecurity, protecting critical infrastructure, industrial, and government organizations across energy, manufacturing, transportation, and resources sectors in over 68 countries.
In this role, you will perform hands-on static and dynamic analysis of malicious samples to understand their behavior, capabilities, and intent. You'll conduct threat intelligence operations to collect and vet knowledge needed to respond to advanced threats, contribute to signature creation activities, and help shape the threat intelligence infrastructure. You'll also contribute to technical materials shared publicly, work actively with the marketing team, independently propose and drive new ideas, and present findings at technical conferences. The role requires embodying Nozomi Networks' cultural pillars of transparency and trust.
Key responsibilities include malware analysis in both Windows and Linux environments, reverse engineering using industry-standard tools, threat intelligence research, and collaboration with cross-functional teams to enhance product protection capabilities.
REQUIREMENTS:
- Proven hands-on experience with static and dynamic malware analysis in isolated/sandboxed environments
- Demonstrated experience analyzing Windows malware with solid understanding of PE (portable executable) format and common execution, persistence, and evasion techniques
- Experience analyzing malware in Linux environments, including familiarity with ELF format and Linux-specific persistence and execution techniques (strong advantage)
- Proven record of presentations at technical conferences
- Hands-on experience with reverse engineering tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similar
- Solid understanding of binary file attributes including executable structures and packers
- Familiarity with MITRE ATT&CK framework and cyber kill chains
- Understanding of OSI model and ability to use Wireshark
- Ability to operate in confidential environments with non-disclosure agreements and high confidentiality requirements
STRONG PLUS:
- Previous professional experience as Security Researcher, Detection Engineer, SOC Analyst, or Threat Hunter
