Cyber Threat Analyst

Nozomi Networks, a leader in OT and IoT cybersecurity, protects critical infrastructure, industrial and government organisations across energy, manufacturing, transportation and resources in more than 68 countries. The company is expanding its Security Research department and is looking for a Cyber Threat Analyst who will conduct threat‑intelligence research, reverse‑engineer malicious samples and share the results with customers and the public. In this role you will spend your days performing hands‑on static and dynamic analysis of malicious code to uncover behaviour, capabilities and intent. You will run threat‑intelligence operations to gather and validate information needed to counter advanced attacks, help create detection signatures and shape the threat‑intelligence infrastructure, and work with the marketing team to produce technical material for public release. You will also propose new ideas, collaborate closely with teammates, and present your findings at technical conferences while living the Nozomi Networks cultural pillars. To succeed you need proven experience analysing malware both statically and dynamically inside isolated or sandboxed environments. You must have deep expertise in Windows malware, including the PE executable format and common persistence and evasion techniques. Proficiency with reverse‑engineering tools such as IDA Pro, Ghidra, OllyDBG, x64dbg or radare2 is required, as is a solid grasp of binary structures and packers. Familiarity with the MITRE ATT&CK framework, a good understanding of the OSI model and the ability to use Wireshark are also essential. The role demands a track record of presenting at conferences and the ability to work under non‑disclosure agreements while maintaining a high level of confidentiality. Experience analysing Linux malware, especially the ELF format and Linux‑specific techniques, is considered a strong advantage, as is prior work as a Security Researcher, Detection Engineer, SOC Analyst or Threat Hunter. Nozomi Networks promotes diversity, inclusion and belonging, offers health‑and‑wellness, financial and work‑life‑balance benefits, and provides flexible time‑off. The team values integrity, customer success and continuous innovation, giving you the chance to grow while protecting what matters most. What the role asks for: - Static and dynamic malware analysis in sandboxed environments - Windows malware analysis with PE format expertise - Reverse engineering using IDA Pro, Ghidra, OllyDBG, x64dbg, radare2 - Understanding of binary structures and packers - Familiarity with MITRE ATT&CK framework - OSI model knowledge and Wireshark usage - Proven conference presentation record - Ability to work under NDAs and maintain confidentiality