Threat Researcher (Linux)
Мэтч & Сопровод
Для мэтча с этой вакансией нужен Plus
Описание вакансии
TL;DR
Threat Researcher (Linux): Implementing behavior-based detection and researching Linux kernel exploits to protect infrastructure with an accent on malware analysis and reverse engineering. Focus on mapping attack behaviors to MITRE ATT&CK and discovering new threats to Linux systems.
Location: Remote (Must have legal authorization to work in Canada without sponsorship)
Salary: $107,000 – $179,000
Company
is a global leader in advanced security solutions, providing MDR and XDR services to over 600,000 organizations worldwide.
What you will do
- Implement context-aware and behavior-based detections for Linux infrastructure to provide multiple layers of protection.
- Conduct Linux kernel exploit research and develop corresponding detection methods.
- Perform threat hunting and data mining to discover new threats and protection opportunities.
- Reverse engineer and debug malware to understand the complete end-to-end kill chain.
- Map attack behaviors and protections to the MITRE ATT&CK framework.
- Publish technical research articles and whitepapers on the corporate blog.
Requirements
- Deep knowledge of Linux operating system internals and APIs.
- Proven experience in computer security and threat research.
- Proficiency in dynamic and static malware analysis.
- Strong programming experience and fluency in assembly.
- Legal authorization to work in Canada without requiring employer sponsorship.
Nice to have
- Experience in threat hunting and data mining.
- Advanced reverse engineering skills.
- Knowledge of exploitation techniques and offensive tools.
Culture & Benefits
- Remote-first working model as the primary option for employees.
- Employee-led diversity and inclusion networks and global sustainability initiatives.
- Global wellbeing days, monthly webinars, and fitness competitions.
- Annual charity initiatives and volunteer days for supporting local communities.
- Comprehensive benefits package including bonus eligibility.
Будьте осторожны: если работодатель просит войти в их систему, используя iCloud/Google, прислать код/пароль, запустить код/ПО, не делайте этого - это мошенники. Обязательно жмите "Пожаловаться" или пишите в поддержку. Подробнее в гайде →