Junior Malware Research Engineer (Cybersecurity)

TL;DR

Junior Malware Research Engineer (Cybersecurity): Analyze malware samples, suspicious files, and threat intelligence for Moonlock with an accent on static and dynamic analysis, IoC validation, and detection rule development. Focus on researching emerging attack techniques, building malware collections, supporting incident investigations, and improving the detection pipeline with AI-assisted automation.

Location: Ukraine or Europe. Hybrid work model with the option to work remotely or from the Kyiv coworking hub.

Company

hirify.global develops consumer software and cybersecurity products, including CleanMyMac, Setapp, ClearVPN, and Moonlock.

What you will do

• Analyze malware samples and suspicious files under the guidance of senior engineers.
• Collect, organize, and validate IoCs and threat intelligence from public, internal, and OSINT sources.
• Assist with creating and improving malware detection rules, including YARA rules.
• Investigate user-reported security incidents and support Customer Support with technical case analysis.
• Research emerging malware trends and attack techniques, and build similarity-based threat collections.
• Prepare research summaries, technical documentation, and content about threat findings.

Requirements

• Basic understanding of malware, phishing, common attack techniques, and cybersecurity principles.
• Knowledge of operating system fundamentals, including processes, memory management, filesystems, and permissions.
• Familiarity with macOS, Linux, or other UNIX-like environments.
• Understanding of static and dynamic malware analysis; familiarity with YARA or willingness to learn it.
• Strong research and analytical skills with careful attention to detail, plus experience using AI tools for data processing and automation.
• Upper-Intermediate English or higher and fluent Ukrainian are required.

Nice to have

• Scripting or automation experience with Python, Bash, or a similar language.
• Hands-on malware analysis experience from personal, academic, or professional projects.
• Knowledge of IoCs, threat intelligence, and the MITRE ATT&CK framework.
• Experience with virtual machines and automated sandbox environments.

Culture & Benefits

• Remote-first flexibility with access to a Kyiv coworking office operating around the clock and supported by UPS and Starlink.
• Medical insurance from the first working month, with a yearly medical insurance allowance for employees abroad.
• Flexible working hours and a trust-based work environment.
• Professional development opportunities, annual reviews, and internal communities.
• Personal time off, parental leave, and sabbaticals after five years with hirify.global.
• Support for veterans, active military personnel, mobilized employees, and colleagues or families affected by the war.