Résumé du poste / Summary
Support ESET Threat Research by building and maintaining internal tools, automation, and data pipelines that accelerate the delivery of actionable threat intelligence.This is a support role embedded in the research team. You will not reverse malware yourself. You will remove the friction around how researchers work: unifying scattered metadata, automating the path from analysis to customer deliverables, and giving researchers one good interface instead of ten.
Description du poste / Job description
Meet the Team
ESET Research is a team of 30+ researchers all over the world who analyze complex cyber-espionage and cybercrime operations. We work in collaboration with other internal teams to improve ESET products and create resilient malware detections.
Our primary goal is to understand how threat groups operate in order to better protect our customers and disrupt malicious activities. We write private reports that are available to ESET Threat Intelligence customers.
We share our knowledge publicly on ESET’s blog, https://www.welivesecurity.com/research/, and at technical conferences all around the world (Virus Bulletin, Black Hat, RSA, Botconf, etc.).
About the Role
Build and maintain internal tools that unify sample metadata across multiple internal and external systems (network telemetry, sandbox, malware repository, TI platform) and make threat intelligence data searchable and reusable.
Develop and maintain automated pipelines that move analysis outputs into TI platforms (e.g. MISP) and generate customer-facing deliverables such as IOC tables, indicator packages, and report skeletons.
Create researcher-facing web applications and workflows for sample lookup, triage status, analysis tracking, and tagging.
Own the tooling backlog in partnership with researchers.
Collaborate with engineering teams owning upstream systems (telemetry, sandbox, etc.).
Proactively identify reliability, performance, and correctness issues services before they become incidents — improve runbooks, dashboards, alerting, and automation.
Essential Requirements
Experienced in Python and JavaScript, with a proven track record of designing, building and maintaining Python systems with real operational accountability, not solely scripting or automation
Create and maintain APIs, databases, queues, and data integration across multiple systems, including schema design, and query optimization.
Familiarity with threat intelligence workflows — enough to understand what researchers do across internal systems, without needing to be a malware reverser.
Experience building web applications.
Experience with container technology (e.g. Docker), CI/CD, Git, and test automation.
Secure coding practices for systems that handle malicious files and sensitive data.
Strong collaboration and discovery skills —turning pain points into shipped tooling.
Desirable Requirements
Familiarity with malware analysis workflows and common sample metadata (hashes, file type, packers, strings, imports, network indicators, sandbox behavior), including experience with sandboxes (CAPE, Cuckoo, Joe Sandbox, Any.Run, or internal equivalents) as data sources.
Familiarity with MITRE ATT&CK and mapping malware behavior to techniques.
Experience using AI-assisted tooling thoughtfully — both to accelerate development backed by sound planning and to power researcher-facing features (report generation, structured extraction), with strong judgment about validation, code quality and security limitations.
Familiarity with building modern CLI/TUI/WebUI tooling.
Prior work delivering tooling to threat intelligence or security research teams.
Participation to CTFs
Ready to Make an Impact?
If you’re excited about this opportunity and feel it aligns with your journey, don’t hesitate—apply and show us what drives you
Basic wage component for Bratislava location (brutto): from 2700 EUR
* The final basic wage component can be increased accordingly to individual skills and experience of the selected candidate.
* Performance bonus 2 times per year up to 10% of the basic salary paid for the evaluation period(usually 6 months).
#LI-JM1 #mid-senior #LI-Hybrid
Avantages du poste / Benefits
Santé et bien-être- Régime d'assurance privée collective
- Plan d'épargne retraite collectif
- Programme d'activité physique
- Supports à vélos intérieurs et programme de partage de vélos
- Bureau à domicile
- Jours de congé supplémentaires
- Horaires de travail flexibles
- Rafraîchissements au bureau (fruits, snacks, boissons et café)
- Petit-déjeuner
- 5 à 7 / Réunions après le travail
- Activités de renforcement de l'esprit d'équipe
- Salon commun (« Living room ») avec PlayStation, ping-pong et baby-foot
- Activités de Noël
- Apprentissage LinkedIn/ Udemi
- Programme de fidélisation (jours de vacances supplémentaires, bonus financier, gâteaux)
- Recommandation d'un ami
- Licence ESET gratuite pour les amis et la famille
- Cadeaux de Noël
________________
Health & well-being- Group private insurance plan
- Group retirement savings plan
- Physical activity program
- Interior bike racks and bike sharing program
- Home office
- Extra days off
- Flexible work hours
- Refreshments in office (fruit, snacks, drinks & coffee)
- Breakfast
- 5 à 7 / Afterwork get togethers
- Teambuilding activities
- Common lounge ("Living room") with PlayStation, ping-pong and foosball tables
- Christmas activities
- LinkedIn Learning/ Udemi
- Loyalty program (extra vacation days, financial bonus, cake/cupcakes)
- Friend referral
- Christmas gifts
Emplacement principal / Primary location
MontrealAutres lieux d'implantation / Additional locations
Bratislava, PragueType d'heure / Time type
Full timeSkills Required
- Proven experience designing, building, and maintaining production Python systems with operational accountability
- Experience with JavaScript and building web applications
- Create and maintain APIs, databases, queues, and data integration, including schema design and query optimization
- Familiarity with threat intelligence workflows and researcher needs
- Experience with container technology (e.g., Docker), CI/CD, Git, and test automation
- Secure coding practices for systems that handle malicious files and sensitive data
- Strong collaboration and discovery skills to turn researcher pain points into shipped tooling
ESET Compensation & Benefits Highlights
The following summarizes recurring compensation and benefits themes identified from responses generated by popular LLMs to common candidate questions about ESET and has not been reviewed or approved by ESET.
-
Leave & Time Off Breadth — Time off is viewed as strong, with added days off and vacation/PTO described positively. Policies around PTO appear to contribute meaningfully to overall value.
-
Parental & Family Support — Parental benefits are highlighted as supportive, with enhanced parental leave referenced in multiple regions. This area is frequently cited as a standout element of the package.
-
Flexible Benefits — Flexible work options such as hybrid schedules and flexible hours are emphasized and appear to be widely appreciated. Work-from-home flexibility is repeatedly highlighted as a strength.
ESET Insights
What We Do
For more than 30 years we have been here helping to watch over and protect progress. Over a billion users worldwide rely upon ESET’s solutions to stay secure from increasingly sophisticated digital threats. ESET´s award-winning IT security software and services provide protection in over 200 countries and territories worldwide, with its software localized into more than 30 languages. Meanwhile, the world continues to move forward at pace. When ESET was founded, the Internet was in its infancy. Now technology is part of everything we do and is central to the continued advancements in our society. Most of the time technology does just what it is supposed to, but in order to ensure continued progress in the digital age we need someone to question what’s going on in the background. And that’s why we are here – to continue protecting technology from threats, enabling everyone to fully embrace it’s potential and rely on it. Put simply - when technology enables progress, ESET is here to protect it. ESET - Progress. Protected. Visit www.eset.com to learn more
