Windows Malware Researcher (AI Safety)

Location: Remote within Poland or Bulgaria

Company

hirify.global is a global staffing company supporting a client that builds specialized evaluation infrastructure for AI safety and robustness testing, including adversarial scenario and environment development.

What you will do

• Review cybersecurity prompts that an AI system could not confidently classify as benign or malicious.
• Determine the underlying intent and assess whether the user has a legitimate purpose or intends to cause harm.
• Apply Windows malware expertise to evaluate technical context, specificity, and the real-world uplift a response could provide to an attacker.
• Annotate prompts with intent labels and concise written rationales according to project guidelines.
• Independently duplicate annotations as a second researcher and escalate disagreements to a reviewer.
• Flag ambiguous cases, emerging attack techniques, and guideline gaps to help improve the evaluation process.

Requirements

• At least 5 years of hands-on experience in Windows malware analysis and research.
• Strong command of Windows internals and the Win32/NT API, including process injection, persistence, privilege escalation, and EDR/AV evasion techniques.
• Experience with static and dynamic PE-file analysis, including unpacking, deobfuscation, and use of sandboxes and debuggers such as x64dbg, IDA, and Ghidra.
• Experience analyzing loaders, infostealers, RATs, ransomware, and C2 frameworks.
• Ability to write YARA rules and extract IOCs and TTPs mapped to MITRE ATT&CK.
• Strong analytical judgment to infer a user's underlying goal from a short prompt and distinguish defensive, educational, and research use from attack preparation.
• Clear written communication in English and the ability to document reasoning concisely.

Nice to have

• GIAC GREM, eCMAP, or GIAC GCFA certification.
• Online achievements, write-ups, or contributions on HackTheBox, Pwn2Own, TryHackMe, bug bounty programs, or published security research.

Culture & Benefits

• Remote work from Poland or Bulgaria.
• Independent, detail-oriented, organized work on complex cybersecurity classification problems.
• Opportunity to contribute to AI safety and robustness testing infrastructure.
• hirify.global provides staffing support and can share further details about available benefits.