Associate Principal Malware Analyst

Dragos

8d•Remote

About The Position

Dragos is hiring an Associate Principal Malware Analyst for its Malware Analysis team, which defends critical infrastructure against sophisticated threats through malware analysis, detection development, and threat intelligence. This role leads in-depth analysis of ICS-related malware and firmware, develops novel detection methods, and creates Yara signatures and technical reports that help translate research into actionable defenses. The analyst partners with detection engineers, hunters, and intelligence analysts and contributes to improving the malware analysis pipeline. The position involves independent technical judgment and advising colleagues on complex malware analysis and detection questions.

Requirements

5–8 years of experience in malware analysis, reverse engineering, or a related ICS/OT cybersecurity discipline.
Advanced proficiency in static and dynamic malware reverse engineering using disassemblers, debuggers, and decompilers such as IDA Pro, Ghidra, or x64dbg.
Demonstrated experience analyzing ICS-specific software, firmware, and embedded systems.
Strong Yara signature development skills, including experience building detection analytics for novel malware and attack techniques.
Proven ability to write clear, persuasive, customer-facing technical reports about complex malware findings.
Experience contributing to or improving a malware analysis pipeline, tooling, or workflow.
Ability to collaborate with detection engineers, hunters, and intelligence analysts on cross-team technical problems.

Nice To Haves

Familiarity with ICS/OT protocols, threat groups, and the broader critical infrastructure threat landscape.

Responsibilities

Identify and assess sophisticated threats targeting ICS and critical infrastructure, including their operational impact and severity.
Develop analysis methods and conduct advanced reverse engineering and deobfuscation of ICS-specific malware, software, and firmware.
Create Yara signatures and collaborate with detection engineers to develop novel ICS-specific threat detections based on malware analysis.
Write customer-facing technical reports and internal documentation that explain complex findings and their operational impact to diverse audiences.
Refine the malware analysis pipeline with methods and procedures for emerging techniques and tools.
Collaborate with hunters, intelligence analysts, and detection engineers on malware-related threat research and complex technical problems.
Select analytical methods using independent judgment and serve as a technical advisor on complex malware analysis and detection questions.