Associate Principal Malware Analyst (ICS Cybersecurity)

TL;DR

Associate Principal Malware Analyst (ICS Cybersecurity): Analyzing sophisticated malware and firmware targeting industrial control systems and critical infrastructure with an accent on reverse engineering, deobfuscation, and detection development. Focus on creating Yara signatures, refining malware analysis pipelines, and translating complex research into deployable defenses and customer-facing technical reports.

Location: Remote within the United States

Salary: $182,000 plus competitive equity and comprehensive benefits.

Company

hirify.global provides cybersecurity technology, threat intelligence, and expert services to protect critical infrastructure and industrial control systems worldwide.

What you will do

• Identify and assess sophisticated threats targeting ICS and critical infrastructure, including their operational impact and severity.
• Conduct advanced static and dynamic reverse engineering and deobfuscation of ICS malware, software, firmware, and embedded systems.
• Develop Yara signatures and collaborate with detection engineers on novel ICS-specific threat detections.
• Write customer-facing technical reports and internal documentation that explain complex malware findings and operational impact.
• Improve the malware analysis pipeline with new methods, procedures, tooling, and workflows.
• Collaborate with hunters, intelligence analysts, and detection engineers while advising on complex malware analysis and detection questions.

Requirements

• 5–8 years of experience in malware analysis, reverse engineering, or a related ICS/OT cybersecurity discipline.
• Advanced proficiency in static and dynamic malware reverse engineering using disassemblers, debuggers, and decompilers such as IDA Pro, Ghidra, and x64dbg.
• Demonstrated experience analyzing ICS-specific software, firmware, and embedded systems.
• Strong Yara signature development skills and experience creating detection analytics for novel malware and attack techniques.
• Ability to write clear, persuasive, customer-facing technical reports about complex malware findings.
• Experience improving malware analysis pipelines, tooling, or workflows and collaborating across technical teams.

Nice to have

• Familiarity with ICS/OT protocols, threat groups, and the broader critical infrastructure threat landscape.

Culture & Benefits

• Remote-first work environment with teams across North America, Europe, the Middle East, and APAC.
• Mission-driven work protecting critical infrastructure and essential services.
• Culture built on authenticity, transparency, and trust.
• Competitive equity package.
• Comprehensive benefits plan.

Hiring process

• Successful hires must pass a background check as a condition of employment.