malware analyst

United Sol (Pvt.) Ltd

<p>Research, analyze, and reverse-engineer malicious code to produce detections, mitigation guidance, and threat intelligence for enterprise protection.</p><p>Responsibilities</p><ul><li>Analyze samples (static/dynamic) to determine behavior, persistence, and indicators of compromise.</li><li>Develop signatures, YARA rules, and detection content for endpoint and network tools.</li><li>Produce concise technical reports and IOC packages for incident response teams.</li><li>Feed findings into threat intelligence and help improve defensive controls.</li></ul><p>Required</p><ul><li>3+ years in malware analysis, incident response, or threat research.</li><li>Comfortable with reverse-engineering tools and analysis workflows (no requirement to author malicious tools).</li><li>Strong Windows and/or Linux internals knowledge and scripting ability (Python, PowerShell, etc.).</li><li>Degree in relevant field or equivalent experience.</li></ul><p>Desired</p><ul><li>Experience with sandboxing platforms, YARA, and public threat intelligence platforms.</li><li>Certification such as GIAC Reverse Engineering Malware (GREM) is a plus.</li></ul><p>Ethics</p><p>Role is strictly defensively focused; all analysis conducted for protection, detection, and lawful response.</p><p>Job Type: Full-time</p><p>Work Location: In person</p>

Malware Research & Defensive Analyst (Reverse Engineering)

People Process Teck

<p><b>Job Title:</b> <b>Incident Response / SOC Specialist</b><br/><b>Work Location: </b>Bangalore<br/><b>Client based in</b> Dublin, Ireland<br/><b>Shift:</b> UK Shift Timings<br/><b>Experience Level:</b> 1&ndash;5 years</p><p>We are seeking a highly skilled and motivated <b>Incident Response / SOC Specialist</b> to join our cybersecurity team. This role is critical in defending our digital infrastructure against threats by responding to security incidents, conducting forensic investigations, and proactively hunting for potential risks. The ideal candidate thrives under pressure, possesses deep technical expertise, and is passionate about safeguarding organizational assets.</p><p><b>Key Responsibilities:</b></p><ul><li><b>Incident Lifecycle Management:</b> Respond to security incidents, perform triage, containment, eradication, and recovery procedures.</li><li><b>Investigation &amp; Analysis:</b> Conduct root cause analysis and forensic investigations to determine the nature and impact of incidents.</li><li><b>Threat Hunting:</b> Proactively search for indicators of compromise (IOCs) and advanced persistent threats (APTs) across systems and networks.</li><li><b>Post-Incident Reporting:</b> Document incident findings, lessons learned, and remediation steps in detailed reports.</li><li><b>Collaboration:</b> Work closely with SOC analysts, IT teams, and external partners to coordinate response efforts.</li><li><b>Continuous Improvement:</b> Contribute to playbook development, automation efforts, and enhancement of detection capabilities.</li></ul><p><b>Skills &amp; Qualifications:</b></p><ul><li>Proven experience in digital forensics, malware analysis, and intrusion detection systems (IDS).</li><li>Strong proficiency in log analysis across various platforms (SIEM, firewalls, endpoints).</li><li>Familiarity with incident response frameworks and methodologies (e.g., NIST, MITRE ATT&amp;CK).</li><li>Hands-on experience with tools such as Wireshark, Volatility, Sysinternals, and endpoint detection &amp; response (EDR) platforms.</li><li>Relevant certifications such as GCIH (GIAC Certified Incident Handler) and GCFA (GIAC Certified Forensic Analyst).</li><li>Ability to work effectively under pressure in high-stakes environments.</li><li>Excellent communication and documentation skills.</li></ul><p>Job Type: Full-time</p><p>Pay: From &#8377;31,023.01 per month</p><p>Ability to commute/relocate:</p><ul><li>Bengaluru, Karnataka: Reliably commute or planning to relocate before starting work (Required)</li></ul><p>Application Question(s):</p><ul><li>What is your current CTC?</li></ul><p>What is your expected CTC?<br/>What is your notice period?</p><p>Work Location: In person</p>

Incident Response_SOC Specialist

Accenture

<p><b>Project Role : </b>Security Consulting Practitioner<br>
<b>Project Role Description : </b>Advise clients on their business protection journey by shaping security strategy, designing solutions, and providing guidance to strengthen cyber resilience.
<br>
<b>Must have skills : </b>Product Security<br>
<b>Good to have skills : </b>NA<br>
Minimum <b>7.5</b> year(s) of experience is required<br>
<b>Educational Qualification : </b>15 years full time education<br>
<br>
Summary: As a Security Advisor, you will provide enterprise-level advice to make organizations cyber resilient. Your typical day will involve engaging with various stakeholders to assess their security posture, identifying vulnerabilities, and recommending strategies to enhance their defenses against cyber threats. You will also facilitate discussions on best practices and ensure that digital assets are protected while fostering trust within the organization and with external partners. Roles &amp; Responsibilities: - Lead and mentor a team of mobile security analysts in proactively identifying and flagging malicious code and security threats within Android applications. - Oversee the analysis of emerging threats and ensure effective response to security incidents and escalations. - Drive initiatives to proactively identify new malware trends, spam, and other abuse vectors on the Android platform. - Provide proactive inputs and innovative ideas to enhance team workflows, efficiency, and overall security posture. - Possess and apply the ability to proficiently review applications and SDKs through analysis, unpacking, and reverse engineering of software that may compromise user privacy, and guide team members in these techniques. - Demonstrate and impart a deep understanding of techniques utilized by malicious software to tamper with user machines and hinder removal efforts. - Review and approve comprehensive reports detailing analysis findings and recommended remediations. - Collaborate with threat detection and signature engineering teams to translate reverse engineering insights into robust detection logic by mapping malware behaviors to the MITRE ATT&amp;CK framework and developing corresponding YARA rules and network signatures. - Ability to independently review and resolve complex escalations from internal and external sources, collaborating effectively with cross-functional teams and guiding team members in similar situations. Professional &amp; Technical Skills: - A strong background in Application Security, Security Auditing, or a prior role focused specifically on Android malware analysis. - A solid understanding of the Android threat landscape and Potentially Harmful Application (PHA) classifications is highly desirable. - Deep understanding of the Android OS, application lifecycle, and Dalvik bytecode (smali). Must have strong proficiency in reading source code in Java and Kotlin. - Exposure to JavaScript, Flutter &amp; Query languages such as SQL - Experience with scripting languages (Python, Bash). Additional Information: - The candidate should have minimum 7.5 years of experience in Product Security. - This position is based at our Bengaluru office. - A 15 years full time education is required.</p>
<br>
15 years full time education

Security Consulting Practitioner

Hamad International Airport

<div>
 <p>
  <strong>
   <u>
    About Role
   </u>
  </strong>
 </p>
 <p>
  You would be part of the Cyber Security Incident Response team with an operational role to quickly identify, respond to cyber incidents to our global infrastructure. This is a hands-on technical cyber security role with expertise in Security incident response and in the areas of endpoint security, application security, network security or Cloud security.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   <u>
    <br/>
    Role and Responsibilities
   </u>
  </strong>
 </p>
 <ul>
  <li>
   :Assist and/or lead investigations in active security incident scenarios, supporting the organization through the Incident Response lifecycl
  </li>
  <li>
   eProvide expertise in the triage, escalate and respond to potential security events &amp; incidents and provides support to security team
  </li>
  <li>
   sMust also be able to participate in rotating on call schedule and must be able to work collaboratively. Having the ability to work outside of normal working hours as required due to critical incidents or emergency calls, will be essential to success in this role
  </li>
  <li>
   .Proactively hunting threats in the environment, identifying new risk, and developing methods to proactively address threats
  </li>
  <li>
   .Provide cyber&ndash;Incident Response expertise and perform Malware Analysis &amp; reverse engineering of malware
  </li>
  <li>
   .Perform forensic analysis in response to cyber-attacks and computer security breaches on systems and networks to identify the extent and nature of the compromise and provide recommendations on containment, eradication, and remediation steps
  </li>
  <li>
   .Routinely prepare written technical documentation and reports of findings, along with recommendations, that result from cases involving forensic analysis and incident response
  </li>
  <li>
   .Develop and update operational playbook for various cyber incident scenarios including Data breach, ransomware, supply chain compromise etc.
  </li>
  <li>
   ,Responsible for identification, analysis, and correlation of events of interest, escalation and continued monitoring of cybersecurity events on an enterprise-wide basis
  </li>
  <li>
   .Analyze various log, network, malware, forensic, and cyber threat intel to validate security threats, recommend appropriate countermeasures, and assess impact of cyber incidents
  </li>
  <li>
   .Assist the Cyber Security manager in the analysis of security breaches to identify the root cause and to implement preventive measures
  </li>
 </ul>
 <p>
  <br/>
 </p>
 .
</div>


Technology Services Controller (Cyber Security Incident Response)

Trendyol Group

<div>
 <p>
  <strong>
   About the Team
  </strong>
 </p>
 <p>
  At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.
 </p>
 <p>
  We solve complex problems with data, creativity, and agility &mdash; always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what&rsquo;s next.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   About the Role
  </strong>
 </p>
 <p>
  As a Security Professional, you will act as a key defender, bridging the gap between security monitoring and effective response. You'll leverage deep expertise in threat hunting, malware analysis, and digital forensics to proactively uncover sophisticated threats and strengthen our security posture. By automating workflows with scripting languages like Python and optimizing our SIEM and EDR platforms, you will enhance our operational efficiency and add value to every stage of our defense lifecycle, all while ensuring our practices meet critical compliance standards.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Responsibilities
  </strong>
 </p>
 <ul>
  <li>
   Conduct deep-dive analysis of complex security incidents, perform root cause investigations, and coordinate appropriate response actions.
  </li>
  <li>
   Proactively perform threat hunting activities to identify advanced threat actors, leveraging frameworks like MITRE ATT&amp;CK to analyze attacker behaviors.
  </li>
  <li>
   Analyze malware and malicious activity on EDR, SIEM, and network traffic data using both static and dynamic analysis techniques.
  </li>
  <li>
   Apply basic reverse engineering methods when needed to support the analysis of suspicious files and malware samples.
  </li>
  <li>
   Perform forensic investigations by analyzing logs, memory dumps, registries, and event data to uncover indicators of compromise.
  </li>
  <li>
   Automate incident response workflows and develop playbooks using SOAR platforms to improve efficiency and accuracy.
  </li>
  <li>
   Utilize, analyze, and leverage diverse cyber threat intelligence sources&mdash;including open-source feeds, commercial platforms, and internal telemetry&mdash;to proactively monitor emerging threats, assess attacker tactics, techniques, and procedures (TTPs), and continuously update and enhance defensive measures and response strategies.
  </li>
  <li>
   Operate and optimize security tools including SIEM (e.g., Splunk, Azure Sentinel), EDR (e.g., CrowdStrike, Microsoft Defender), IDS/IPS, and integrate new log sources for enhanced visibility.
  </li>
  <li>
   Contribute to incident monitoring and response activities aligned with compliance standards such as KVKK, GDPR, ISO 27001, PCI-DSS, BDDK, and support regulatory audit requirements.
  </li>
  <li>
   Produce comprehensive incident reports and ensure thorough documentation of investigations and remediation steps.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Expected Qualifications
  </strong>
 </p>
 <ul>
  <li>
   4+ years of experience in security
  </li>
  <li>
   Strong experience in malware analysis, including both static and dynamic techniques.
  </li>
  <li>
   Proficiency in reverse engineering tools and techniques.
  </li>
  <li>
   Hands-on experience with SIEM platforms, EDR solutions, and network security tools.
  </li>
  <li>
   Familiarity with the MITRE ATT&amp;CK framework and threat intelligence services.
  </li>
  <li>
   Experience with scripting languages such as Python or PowerShell for automation tasks.
  </li>
  <li>
   Excellent analytical and problem-solving skills.
  </li>
  <li>
   Strong written and verbal communication skills in English.
  </li>
  <li>
   Certifications such as CISSP, GCIH, GCFA, CEH, or Security+ are preferred.
  </li>
 </ul>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   What We Offer
  </strong>
 </p>
 <p>
  - Hybrid working model with flexibility: a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.
 </p>
 <p>
  - Customisable FlexBenefits budget: Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.
 </p>
 <p>
  - Well-being support: Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.
 </p>
 <p>
  - Personalised training allowance and learning opportunities: Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.
 </p>
 <p>
  - Responsibility from day one: Take full ownership from the start in a culture where every voice is heard and valued.
 </p>
 <p>
  - A diverse, international team: Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.
 </p>
 <p>
  - Opportunities to grow with the best: Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.
 </p>
 <p>
  - Meaningful connections beyond tasks: Be part of team rituals, events, and social activities that help us stay connected and inspired.
 </p>
 <p>
  <br/>
 </p>
 <p>
  <strong>
   Take the Next Step
  </strong>
 </p>
 <p>
  If this role excites you, apply today, we look forward to taking the next step with you.
 </p>
 <p>
  Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.
 </p>
</div>


Cyber Defence Center Engineer

Trendyol

<div><div><div><b>About the Team</b></div><div>
At Trendyol Tech, our mission is to create a positive impact in our ecosystem by enabling commerce through technology.</div><div>
We solve complex problems with data, creativity, and agility &mdash; always driven by real outcomes. With a culture built on learning, collaboration, and ownership, we grow together while building what&rsquo;s next.</div><div></div><div><b><br>
ABOUT THE ROLE</b></div><div>
As a Security Professional, you will act as a key defender, bridging the gap between security monitoring and effective response. You'll leverage deep expertise in threat hunting, malware analysis, and digital forensics to proactively uncover sophisticated threats and strengthen our security posture. By automating workflows with scripting languages like Python and optimizing our SIEM and EDR platforms, you will enhance our operational efficiency and add value to every stage of our defense lifecycle, all while ensuring our practices meet critical compliance standards.</div></div>
<div><div><h3 class="jobSectionHeader"><b>Responsibilities</b></h3><ul><li><ul><li>
Conduct deep-dive analysis of complex security incidents, perform root cause investigations, and coordinate appropriate response actions.</li><li>
Proactively perform threat hunting activities to identify advanced threat actors, leveraging frameworks like MITRE ATT&amp;CK to analyze attacker behaviors.</li><li>
Analyze malware and malicious activity on EDR, SIEM, and network traffic data using both static and dynamic analysis techniques.</li><li>
Apply basic reverse engineering methods when needed to support the analysis of suspicious files and malware samples.</li><li>
Perform forensic investigations by analyzing logs, memory dumps, registries, and event data to uncover indicators of compromise.</li><li>
Automate incident response workflows and develop playbooks using SOAR platforms to improve efficiency and accuracy.</li><li>
Utilize, analyze, and leverage diverse cyber threat intelligence sources&mdash;including open-source feeds, commercial platforms, and internal telemetry&mdash;to proactively monitor emerging threats, assess attacker tactics, techniques, and procedures (TTPs), and continuously update and enhance defensive measures and response strategies.</li><li>
Operate and optimize security tools including SIEM (e.g., Splunk, Azure Sentinel), EDR (e.g., CrowdStrike, Microsoft Defender), IDS/IPS, and integrate new log sources for enhanced visibility.</li><li>
Contribute to incident monitoring and response activities aligned with compliance standards such as KVKK, GDPR, ISO 27001, PCI-DSS, BDDK, and support regulatory audit requirements.</li><li>
Produce comprehensive incident reports and ensure thorough documentation of investigations and remediation steps.</li></ul></li></ul></div></div>
<div><div><h3 class="jobSectionHeader"><b>Expected Qualifications</b></h3><ul><li><ul><li>
4+ years of experience in security</li><li>
Strong experience in malware analysis, including both static and dynamic techniques.</li><li>
Proficiency in reverse engineering tools and techniques.</li><li>
Hands-on experience with SIEM platforms, EDR solutions, and network security tools.</li><li>
Familiarity with the MITRE ATT&amp;CK framework and threat intelligence services.</li><li>
Experience with scripting languages such as Python or PowerShell for automation tasks.</li><li>
Excellent analytical and problem-solving skills.</li><li>
Strong written and verbal communication skills in English.</li><li>
Certifications such as CISSP, GCIH, GCFA, CEH, or Security+ are preferred.</li></ul></li></ul></div></div>
<div><div><b>What We Offer</b></div><ul><li><b>Hybrid working model with flexibility:</b> a schedule that helps you find the right balance between flexibility and team bonding, including work-from-abroad opportunities and a summer working model.</li><li><b>Customisable FlexBenefits budget: </b>Adjust your daily meal allowance, choose your health insurance package (and extend it to your spouse or children), and pick from additional benefits like fuel support or Trendyol shopping credits.</li><li><b>Well-being support: </b>Access to location-based in-house doctors, as well as psychologist and dietitian support, and HPV vaccination provision.</li><li><b>Personalised training allowance and learning opportunities: </b>Use your annual budget for any training or conference of your choice, explore our Learning Management System (LMS) anytime, and join in-person learning sessions offered throughout the year.</li><li><b>Responsibility from day one: </b>Take full ownership from the start in a culture where every voice is heard and valued.</li><li><b>A diverse, international team: </b>Collaborate with global peers across our offices in Berlin, Amsterdam, Dubai, and beyond, in a startup-spirited and collaborative environment.</li><li><b>Opportunities to grow with the best: </b>Tackle meaningful challenges, develop through hands-on experience, and grow with the support of expert guidance and global mentoring.</li><li><b>Meaningful connections beyond tasks:</b> Be part of team rituals, events, and social activities that help us stay connected and inspired.</li></ul><div></div><div><b><br>
Take the Next Step</b></div><div>
If this role excites you, apply today, we look forward to taking the next step with you.</div><div>
Want to get to know the team better first? Explore our Career Website, LinkedIn, or YouTube to learn more about #LifeatTrendyol and how we work.</div></div></div>

Computacenter

<div><div><b>Location:</b> IN - Bangalore 24/7 | <b>Job-ID:</b> 214593 | <b>Contract type:</b> Standard | <b>Business Unit:</b> Others</div><br>
<div></div>
<p><b>
Life on the team</b></p>
<p>
Placed within our Security Operations function, our Cyber Threat Operations Team play an essential role in protecting Computacenter from the latest threats and threat actors. The Cyber Threat Operations Team work to ensure we have a forward-looking mentality to identify emerging threats and trends. Our team brings together a diverse set of specialist skills, including Threat Intelligence, Threat Hunting, Malware Analysis, Digital Forensics, Incident Response, and Threat Modelling. At our core, we are driven by a mission to &ldquo;investigate, collate and locate&rdquo;: to unearth new threats, collate all available information about them, and then seek them out and respond appropriately. The aim of the Cyber Threat Operations Team is to ensure the wider security division is one step ahead of security threats by applying technical knowledge and understanding of global events to produce relevant, actionable intelligence. The Cyber Threat Operations Team understand how threats feed into business risks. We lead on collecting, evaluating, and analysing all sources of information to produce finished Threat Intelligence to help inform Computacenter and minimise the risk of harm.</p><br>
<p>
</p><p><b>We are now looking for an experienced Threat Hunt Analyst to join our team. In this role you will be responsible for the prioritisation, gathering and analysing malware samples associated to emerging threats, and then disseminating your findings to relevant teams for appropriate action.</b></p><br>
<p></p>
<p><b>
What you&rsquo;ll do</b></p>
<ul>
<li>Support threat hunting team in day-to-day checklist(s), including log review, alert analysis, and investigation enrichment.</li>
<li>Support the improvement and development of new threat hunt queries based on observed and measured cyber threat activity.</li>
<li>Remain current on threats, exposures and mitigations (APT, Zero days, Methods &amp; tactics) that could impact Computacenter; Deliver specialist investigation and analysis on cyber security incidents to support the Computacenter Cyber Security Incident Response Team (CSIRT)</li>
<li>Maintenance of tooling to ensure the smooth running CTH services</li>
<li>Create hypotheses, generate structured plan and conduct threat hunts for given threats.</li>
<li>Create and maintain standard library of repeatable hunting queries to search for common attack techniques</li>
<li>Generate reports on discovered threats</li>
<li>Documentation of processes and services delivered by the team.</li></ul><br>
<p></p>
<p><b>
What you&rsquo;ll need</b></p>
<ul>
<li>Experienced in Information and Cyber Security, including a SOC.</li>
<li>Experienced in common open and closed source intelligence tools and technologies.</li>
<li>Experienced in adversary tactics and techniques frameworks such as Mitre ATT&amp;CK and Killchain.</li>
<li>Experienced in common SOC SIEM technology applications such as MS Sentinel.</li>
<li>Experienced in KQL, with ability to formulate advanced queries.</li>
<li>Experienced in investigating security breaches and security incident management.</li>
<li>Knowledge of specialist security technologies including CIS Benchmarks, Tenable etc.</li>
<li>Knowledge of specialist threat information sharing including STIX, TAXII, CiSP etc.</li>
<li>Knowledge of network topologies and protocols. Knowledge of security risk management, incident response and crisis management.</li>
<li>Communicates in a clear straightforward way (written and verbally)</li>
<li>Ability to present complex technical details in a simple business context</li>
<li>Excellent written and verbal English</li>
<li>Takes responsibility for own actions and ability to perform in a structured manner and to strict deadline.</li></ul><br>
<div></div>
<div><b>Current information for our applicants</b></div>
<div>Business as usual? Not quite. Of course, the Corona crisis also presents us with major challenges.</div><br>
<div></div>
<div>However, we are broadly positioned across various industries, plan for the long term and have always been flexible in our approach to our customers, especially in times of crisis. Our core business is digitisation. We believe that this topic will continue to grow in importance for many companies in both public and private sectors.</div><br>
<div></div>
<div>That's why there are still areas of our business with clear hiring requirements &ndash; and we would like to bring talent like you on board! By the way, we have completely virtualised our application process and our recruiters remain available to you should you have any questions.</div><br>
<div></div>
<div>We are still looking forward to getting to know you!</div><br>
<div></div>
<div><b>About us</b></div>
<div>Computacenter is a leading independent provider of IT infrastructure services. We work at the heart of digitisation, advising organisations on IT strategy, implementing the most appropriate technology and managing our customers&rsquo; infrastructures.</div><br>
<div></div>
<div>We offer a friendly, open working environment without too much fuss about hierarchy. We are looking for professionals with diverse competencies, personalities and strengths who want to live our shared value of teamwork and performance.</div><br>
<div></div>
<div>Interested in joining a company with a strong sense of community?<br>
We&rsquo;re growing. We&rsquo;re hiring. We encourage. We empower. We support.<br>
#CCfuturetalent</div></div>

Senior Technical Analyst

Search 2990+ Malware analyst jobs near you this October. New roles added regularly across leading industries. Apply today.

2990 malware analyst jobs NEAR_ME

Malware Research & Defensive Analyst (Reverse Engineering)

Incident Response_SOC Specialist

Security Consulting Practitioner

Technology Services Controller (Cyber Security Incident Response)

Cyber Defence Center Engineer

Cyber Defence Center Engineer

Senior Technical Analyst