Associate Principal Malware Analyst

Senior malware analyst on Dragos's Malware Analysis team, which studies the tools adversaries aim at industrial control systems and critical infrastructure and turns that work into detections and intelligence. The role is remote in the US.

The analyst leads deep reverse engineering and deobfuscation of ICS malware, software and firmware, judges the severity of sophisticated threats, writes Yara rules and works with detection engineers on new ICS-specific detections, produces customer-facing technical reports, and improves the analysis pipeline. Dragos wants five to eight years in malware analysis, reverse engineering or ICS/OT security, advanced static and dynamic analysis with tools like IDA Pro, Ghidra and x64dbg, experience with embedded and ICS firmware, and strong Yara skills. Knowledge of ICS protocols and threat groups is a major plus.