Note: The job is a remote job and is open to candidates in USA. Dragos, Inc. is a global leader in xOT cybersecurity, dedicated to protecting critical infrastructure systems. The Associate Principal Malware Analyst will lead in-depth analyses of ICS-related malware, develop detection methods, and collaborate with various teams to enhance malware analysis and defense strategies.
Responsibilities
- Identify and assess highly sophisticated threats targeting ICS and critical infrastructure, evaluating their operational impact and severity
- Develop innovative analysis methods and conduct advanced reverse engineering and deobfuscation of ICS-specific malware, software, and firmware
- Create Yara signatures and partner closely with detection engineers to develop novel, ICS-specific threat detections informed by deep malware analysis findings
- Write persuasive customer-facing technical reports and internal documentation that translates complex malware findings into clear operational impact for diverse audiences
- Refine and evolve the malware analysis pipeline with new methods and procedures to address emerging techniques and tooling as they surface in the threat landscape
- Collaborate across teams—with hunters, intelligence analysts, and detection engineers—to drive malware-related threat research and solve complex technical problems
- Exercise independent judgment in selecting analytical methods and serve as a trusted technical advisor on complex malware analysis and detection questions across the organization
Skills
- 5-8 years of experience in malware analysis, reverse engineering, or a related ICS/OT cybersecurity discipline
- Advanced proficiency in static and dynamic malware reverse engineering using tools such as disassemblers, debuggers, and decompilers (e.g., IDA Pro, Ghidra, x64dbg)
- Demonstrated experience analyzing ICS-specific software, firmware, and embedded systems
- Strong Yara signature development skills, with experience building detection analytics for novel malware and attack techniques
- Proven ability to write clear, persuasive, customer-facing technical reports on complex malware findings
- Experience contributing to or improving a malware analysis pipeline, tooling, or workflow
- Comfortable collaborating with detection engineers, hunters, and intelligence analysts on cross-team technical problems
- Familiarity with ICS/OT protocols, threat groups, and the broader critical infrastructure threat landscape is a major plus
Benefits
- Competitive Equity Package
- Comprehensive Benefits Plan
Company Overview