Sr Principal/Principal Windows Malware Security Researcher

• Playing a pivotal role in shaping the future of our security solutions
• Enhance the effectiveness of our EDR product by designing cutting-edge protection components and developing sophisticated prevention rules
• Researching OS internals and how Windows works under the hood - leveraging this knowledge to develop and improve our anti-malware mechanisms and capabilities
• Research and lead novel protection ideas to production-grade level, serving as the feature subject matter expert
• Research new malware and APT mitigation techniques and develop corresponding capabilities (POC level), or improve existing mitigation capabilities
• Respond to malware-based security events at clients' networks
• Stay up to date with current malware and APT techniques
• Provide feedback to the product management team on new feature requests and product enhancements from our customer base
• Find new malware techniques and APT attacks, including analysis of caught-in-the-wild malware
• Operate independently end-to-end - from initial threat idea, through research and POC, to handing off a production-ready design to core agent engineering with clear specs, test cases, and edge-case analysis
• Be a team player who lifts others up - happy to jump in when a teammate is stuck on a tricky Windows internals or RE question, share what you've figured out, and generally make the people around you better

• At least 5 years of experience in the cyber security research domain
• In-depth knowledge of Windows operating system internals (both user-mode and kernel-mode) - at least 3 years of hands-on research experience
• In-depth knowledge of C/C++, with hands-on development experience using C/C++ (Win32 API) in a Windows environment
• Experience with anti-RE techniques such as anti-debug, anti-VM, unpacking, etc.
• Strong knowledge of the cyber threat landscape, including APTs (Advanced Persistent Threats) and modern malware techniques
• Strong dynamic analysis skills with hands-on experience using debuggers such as WinDbg, x64dbg, OllyDbg, or similar
• Strong static analysis skills with hands-on experience using disassemblers such as IDA Pro and Ghidra
• Proficiency in Python
• Knowledge of networking and internet protocols
• A major advantage to candidates with at least 2 years of experience in at least one of the following: EDR/XDR products, Windows kernel development, low-level security solution development, Windows exploitation, or vulnerability research
• Ability to work fully independently - own a research track from scoping to POC handoff with minimal supervision - while also collaborating effectively as part of a team
• Strong problem-solving skills with a passion for innovation, sharp attention to detail, and a bias for taking initiative on hard problems
• Comfortable working under pressure, juggling competing priorities, and delivering against tight deadlines

At least 2 years of experience in at least one of the following: EDR/XDR products, Windows kernel development, low-level security solution development, Windows exploitation, or vulnerability research