Nozomi Networks · Milan, Italy
About the Role
As a Malware Analyst at Nozomi Networks, you will be part of our Security Research department, responsible for producing accurate threat intelligence and reverse-engineering samples to create solid detection signatures. You will work closely with our team to identify and analyze malware threats, develop effective countermeasures, and contribute to the improvement of our product.
Responsibilities
Create and tune various detection rules within our product
Perform threat intelligence operations to collect and vet all the required knowledge to respond efficiently to advanced threats
Occasionally contribute to technical material shared with the public
What We Are Looking For
Experience in creating signatures: YARA, SNORT or SURICATA, STIX, and SIGMA
Familiarity with the MITRE ATT&CK; framework and cyber kill chains
Understanding of the OSI model and an ability to use Wireshark
Basic experience with Python
Attitude to operate in environments including data covered by non-disclosure agreements and high-level of confidentiality
Proven experience in reverse engineering using analysis tools like IDA PRO, Ghidra, OllyDBG, x64dbg, radare2, etc
Fundamental understanding of attributes of binary files such as executable structures and packers
Previous professional experience as a Detection Engineer, SOC Analyst or a Threat Hunter