The Role
Conduct malware reverse engineering, track APT groups and campaigns, monitor darknet intelligence, and develop threat intelligence for red and blue teams. Create malware emulators, proof-of-concept tools, YARA rules, hunting signatures, detection logic, and attack playbooks. Support threat hunting and detection engineering through IOC and behavioral analysis, while researching C2 infrastructure, EDR tampering, and living-off-the-land techniques.
Summary Generated by Built In
About Globals:
Globals has drastically grown from a small home office to a globally recognized enterprise offering world-class quality solutions on Cybersecurity, Cyberwarfare, ERP Systems, AI, and Enterprise Application Development for various industries including Defence, Education, Government, Financial Services and Transport Industries. Globals has enabled its customers to be game-changers in their industry through its disruptive and innovative solutions.
Globals is certified as a "Great Place to Work" organization for its laudable work culture that helps its team members manage work-life, have dedicated hours to upskill and reskill themselves, and most important to ensure that the projects that they are working on are always unique, challenging their status quo every time. Our unique work culture has made us one of the world’s fastest-growing technology companies as recognized and
featured by The Economist.
Our excellence in technical stewardship and service-offering expertise has facilitated our clients ranging from individual entrepreneurs to Fortune Global 500 – to explore new business opportunities, reduce their operational costs significantly and boost their revenues. Today, Globals enjoys a strong position in the industry as a high-performing leader through its technology innovation and remarkable domain expertise. Globals is a CMMI Level 5 certified company.
About the Job Role:
We are seeking a Malware & Threat Intelligence Researcher to join our Offensive Security
team. This role is ideal for a passionate researcher who thrives on analyzing advanced malware
campaigns, reverse-engineering threats, monitoring threat actors across dark web/clearnet and
APT Groups, and crafting threat intelligence that can power our red and blue teams. You will
contribute to strategic threat intelligence, malware emulation, threat hunting, and tool
development.
Responsibilities:
- Conduct in-depth malware reverse engineering (PE, .NET, Golang, Rust, PowerShell,
Batch, VBS, etc.) - Track APT groups, develop TTP profiles, and perform contextual threat intelligence.
- Develop malware emulators or PoCs and scripts for red team simulations or cyber
ranges. - Monitor darknet forums and marketplaces, and stealer logs for actor trends and breach
intelligence. - Create YARA rules, hunting signatures, and detection logic based on static/dynamic
analysis. - Support threat hunting and detection engineering teams with enriched IOC and
behavioural insights. - Collaborate with internal teams to simulate real-world threats, analyze telemetry, and
produce attack playbooks.
Requirements
- Knowledge of packers, obfuscation, encryption, and anti-debugging techniques
- 5-9 years of hands-on experience in malware analysis, threat research, or reverse
engineering. - Experience with APT tracking, malware campaign documentation, or C2 hunting.
- Published research/blogs on threat campaigns is a plus
- Bachelor's degree in engineering, Computer Applications, Cybersecurity, or related field.
- Certifications like GIAC GREM, CRTIA, or similar are a plus
- Reverse engineering: Ghidra, IDA Pro, x64dbg, OllyDbg
- Scripting: C++, Golang, Python
- Malware Analysis: PEStudio, ProcMon, Wireshark, FakeNet, Any.Run
- Threat Intel: FOFA, Validin, Censys, VirusTotal, Telegram, Darknet forums
- YARA, Sigma, OSINT tools
- Familiarity with MITRE ATT&CK framework and Threat Intel Platforms (TIPs)
- Understanding of EDR tampering, living-off-the-land binaries (LOLBins), C2
infrastructure
Benefits
- Work on high-impact cyber defense and cyberwarfare initiatives.
- Publish and present your research to a global audience.
- Collaborate with National Cybersecurity Coordinator’s Office, CERT-IN, DRDO, and
- other National Security Agencies focused on Cybersecurity.
- Enjoy flexibility, innovation-driven culture, and recognition for thought leadership.
Skills Required
- 5-9 years of hands-on experience in malware analysis, threat research, or reverse engineering
- Knowledge of packers, obfuscation, encryption, and anti-debugging techniques
- Experience with APT tracking, malware campaign documentation, or C2 hunting
- Bachelor's degree in engineering, Computer Applications, Cybersecurity, or a related field
- Experience with reverse-engineering tools including Ghidra, IDA Pro, x64dbg, or OllyDbg
- Scripting experience with C++, Golang, and Python
- Experience with malware-analysis tools including PEStudio, ProcMon, Wireshark, FakeNet, or Any.Run
- Experience with threat-intelligence sources and tools such as FOFA, Validin, Censys, VirusTotal, Telegram, and darknet forums
- Knowledge of YARA, Sigma, and OSINT tools
- Familiarity with the MITRE ATT&CK framework and Threat Intelligence Platforms
- Understanding of EDR tampering, living-off-the-land binaries, and C2 infrastructure
- Published research or blogs on threat campaigns
- GIAC GREM, CRTIA, or similar certification
Am I A Good Fit?
Get Personalized Job Insights.
Our AI-powered fit analysis compares your resume with a job listing so you know if your skills & experience align.
Success! Refresh the page to see how your skills align with this role.
The Company
What We Do
Globals is a technology company providing cybersecurity, cyberwarfare, ERP systems, artificial intelligence, and enterprise application development solutions. Its services support defense, education, government, financial services, transportation, entrepreneurs, and Fortune Global 500 organizations. The company emphasizes innovative technology, secure digital ecosystems, technical stewardship, domain expertise, and helping clients reduce costs, increase revenues, and pursue new business opportunities.
.png){kind=logo}
.png){kind=logo}
