Now is an amazing time to join Nozomi Networks as we build the future of OT and IoT cybersecurity.
We defend some of the world’s largest organizations and critical infrastructure in more than 68 countries and we’re just getting started. Our AI-powered cybersecurity platform secures operational technology (OT) and Internet of Things (IoT) infrastructures for enterprises and government entities across energy, manufacturing, transportation, resources, and critical infrastructure.
As we expand our product portfolio and global presence, our Security Research department is hiring a Malware Analyst to produce accurate threat intelligence and reverse-engineered samples that power solid, reliable detection signatures.
You could be the next "Nozomier"! If this sounds like you, read on.
In this role, you will:
- Perform hands-on static and dynamic analysis of malicious samples to understand their behaviour, capabilities, and intent
- Create and tune various detection rules within our product
- Perform threat intelligence operations to collect and vet all the required knowledge to respond efficiently to advanced threats
- Occasionally contribute to the technical material shared with the public
- Embody the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust
To be successful in this opportunity, you will have:
- Previous professional experience as a Detection Engineer, SOC Analyst, or Threat Hunter
- Proven hands-on experience with both static and dynamic malware analysis, including working in isolated/sandboxed environments
- Demonstrated experience analysing Windows malware, including a solid understanding of the Windows executable format (PE) and common execution, persistence, and evasion techniques
- Experience analysing malware in Linux environments, including familiarity with the ELF format and Linux-specific persistence and execution techniques is a strong advantage
- Proven experience in reverse engineering using analysis tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similar
- A solid understanding of binary file attributes such as executable structures and packers
- Experience creating detection signatures such as YARA, Snort or Suricata, STIX, and SIGMA
- Familiarity with the MITRE ATT&CK framework and cyber kill chains
- Understanding of the OSI model and an ability to use Wireshark
- Working knowledge of Python
- The attitude to operate in environments including data covered by non-disclosure agreements and a high level of confidentiality
Who we are and what we stand for:
Nozomi Networks is the leader in OT and IoT Cybersecurity. We protect the world's critical infrastructure, industrial and government organizations from cyber threats by providing exceptional network visibility, threat detection and operational insight. We’re always innovating and we hire the best at what they do to ensure our customers always have access to fast product enhancements, exceptional engineering support and rapid deployment across continents. If you like a challenge, and value integrity and customer success, we invite you to help Nozomi Networks build the future of OT and IoT cybersecurity.
Diversity, Inclusion and Belonging are part of our core beliefs, at Nozomi Networks. Diversity of thought, background and culture broadens our knowledge of the world and helps us learn, grow, and gain new perspectives. What makes us all different is what makes us powerful.
Our Global Benefits
All of our benefits are customized to the country you are based in, naturally we want to get the best out of our Nozomiers, so we provide the best benefits packages, such as:
- Health & Wellness
- Financial
- Work-Life Balance
- Unparalleled Flexible Time-Off
Need to know information
Successful candidates will be subjected to background verification checks.
Be cautious of unsolicited messages, fake email addresses, requests for money and unclear job descriptions. Report suspicious activity to authorities. Our open job opportunities and descriptions are posted on Nozomi Networks' career page. If in any doubt please apply for opportunities on our careers website here.
If you would like to know more about our Privacy Policy, please click here. Any questions about how we process personal information, or if you would like help exercising your privacy rights please contact us using the email provided within the Privacy Policy.
Skills Required
- Previous professional experience as a Detection Engineer, SOC Analyst, or Threat Hunter
- Hands-on experience with static and dynamic malware analysis in isolated or sandboxed environments
- Experience analyzing Windows malware and understanding the PE executable format
- Understanding of Windows execution, persistence, and evasion techniques
- Experience analyzing malware in Linux environments
- Familiarity with the ELF format and Linux-specific persistence and execution techniques
- Reverse-engineering experience using IDA Pro, Ghidra, OllyDbg, x64dbg, radare2, or similar tools
- Understanding of binary file attributes, executable structures, and packers
- Experience creating detection signatures using YARA, Snort, Suricata, STIX, and SIGMA
- Familiarity with the MITRE ATT&CK framework and cyber kill chains
- Understanding of the OSI model and ability to use Wireshark
- Working knowledge of Python
- Ability to work with confidential information covered by nondisclosure agreements
What We Do
We accelerate digital transformation by protecting the world’s critical infrastructure, industrial and government organizations from cyber threats. Our solution delivers exceptional network and asset visibility, threat detection, and insights for OT and IoT environments. Customers rely on us to minimize risk and complexity while maximizing operational resilience.
