Threat Researcher

About the role

Nozomi Networks is seeking a Threat Researcher to perform threat intelligence research and reverse‑engineer malicious samples, enhancing protection for OT and IoT customers and sharing findings publicly.

Key responsibilities

• Conduct static and dynamic analysis of malicious samples to determine behavior, capabilities, and intent.
• Gather and vet threat intelligence to respond efficiently to advanced threats.
• Contribute to signature creation and shape the threat‑intelligence infrastructure.
• Produce technical material for public release and collaborate with the marketing team.
• Present findings at technical conferences and propose new ideas within the team.

Required profile

• Hands‑on experience with static and dynamic malware analysis in sandboxed environments.
• Strong knowledge of Windows PE format, execution, persistence, and evasion techniques.
• Familiarity with Linux ELF format and Linux‑specific persistence techniques (strong advantage).
• Proven record of presenting at conferences.
• Ability to handle confidential data under NDAs.

Required skills

• Reverse‑engineering tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2.
• Understanding of binary file attributes, executable structures, and packers.
• Knowledge of the MITRE ATT&CK framework and cyber kill chains.
• Proficiency with Wireshark and OSI model concepts.