At JFrog, we’re reinventing DevOps to help the world’s greatest companies innovate – and we want you along for the ride. This is a special place with a unique combination of brilliance, spirit and just all-around great people. Here, if you’re willing to do more, your career can take off. And since software plays a central role in everyone’s lives, you’ll be part of an important mission. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software.” Wouldn't it be amazing if you could join us on our journey?
JFrog Security is one of the main pillars of the JFrog offering and long-term strategy. We are pushing the boundaries of security analysis of both binaries and code, shifting left and bringing new and exciting features to both developers and DevOps. We are looking for an experienced malware researcher to join the team. As a Malware Researcher at JFrog, you will perform research on source code, compiled code, and various software supply chain attacks. The position requires proven experience in security nomenclature and an understanding of both high-level and low-level attacks.
You’re welcome to examine the products of the research team’s work at https://research.jfrog.com.
As a Malware Researcher at JFrog you will...- Research malicious code in public repositories from various coding languages and technologies.
- Define and implement ways to automatically detect malicious code in open-source software.
- Write technical reports and outward-facing publications regarding all research subjects mentioned above.
- 3+ years malware research experience in any of the following languages: Native code (C, C++), .NET (C# etc), Python, Node.JS, Java, Go
- Experience in writing technical reports
- Programming experience in Python
- Advantage – Binary reverse engineering experience
- Advantage – DevOps experience
Skills Required
- 3+ years malware research experience in C, C++, C#, Python, Node.js, Java, or Go
- Proven experience in security nomenclature and understanding of high-level and low-level attacks
- Experience writing technical reports
- Programming experience in Python
- Binary reverse engineering experience
- DevOps experience
JFrog Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about JFrog and has not been reviewed or approved by JFrog.
-
Fair & Transparent Compensation — Pay is considered competitive overall, with many indicating they feel paid fairly relative to their roles. Compensation sentiment appears to have improved recently.
-
Equity Value & Accessibility — Equity grants and an employee stock purchase plan are commonly part of offers, adding meaningful value to total rewards. These components are highlighted alongside base pay as reasons packages are viewed favorably.
-
Healthcare Strength — U.S. medical, dental, and vision coverage are characterized as comprehensive and high quality. Employer-verified listings reinforce strong core health coverage.
JFrog Insights
What We Do
JFrog Ltd. (Nasdaq: FROG), is on a mission to create a world of software delivered without friction from developer to device. Driven by a “Liquid Software” vision, the JFrog Software Supply Chain Platform is a single system of record that powers organizations to build, manage, and distribute software quickly and securely, ensuring it is available, traceable, and tamper-proof. The integrated security features also help identify, protect, and remediate against threats and vulnerabilities. JFrog’s hybrid, universal, multi-cloud platform is available as both self-hosted and SaaS services across major cloud service providers. Millions of users and 7K+ customers worldwide, including a majority of the FORTUNE 100, depend on JFrog solutions to securely embrace digital transformation. Once you leap forward, you won’t go back!







