Nozomi Networks

Malware Analyst Tech Lead

Milan, ItalyFull timeLeadPosted 20 days ago
Apply on Nozomi Networks →

Sign into see who you know at Nozomi Networks.

Now is an amazing time to join Nozomi Networks as we build the future of OT and IoT cybersecurity. We defend some of the world’s largest organizations and critical infrastructure in more than 68 countries and we’re just getting started. Our AI-powered cybersecurity platform secures operational technology (OT) and Internet of Things (IoT) infrastructures for enterprises and government entities across energy, manufacturing, transportation, resources, and critical infrastructure.As Nozomi Networks continues to expand our product portfolio and global presence, our Security Research department is looking for a Malware Analysis Tech Lead to guide and grow the team responsible for reverse engineering malicious samples, developing high-quality detection signatures, producing actionable threat intelligence, and sharing research findings with customers, partners, and the broader cybersecurity community.  This is a hands-on leadership role for someone who combines deep technical expertise in malware analysis and detection engineering with the ability to mentor others, set technical direction, and communicate complex findings clearly. You will lead a team focused on identifying, analyzing, and tracking advanced threats, with a particular emphasis on creating reliable detections that strengthen our products and help protect critical infrastructure around the world.  You could be the next “Nozomier”! If this sounds like you, read on.  In this role, you will:  Lead the team creating and curating various detection rules within our product, acting as a manager and as an individual contributor  Help the support team address the customer feedback associated with these detections  Perform threat intelligence operations to collect and maintain all the required knowledge to respond efficiently to advanced threats  Contribute to the technical material shared with the public  Embody the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trust  To be successful in this opportunity, you should have:  Industry experience as an IT manager  Ability to perform reverse engineering using debuggers, understanding specifics of MZ-PE and ELF executables  Experience in creating some of these signatures: YARA, SNORT or SURICATA, STIX, and SIGMA  Experience speaking at cybersecurity conferences presenting findings in a clear way  Familiarity with the MITRE ATT&CK framework and cyber kill chains  Understanding of the OSI model and an ability to use Wireshark  Basic experience with Python  Attitude to operate in environments including data covered by non-disclosure agreements and a high level of confidentiality  These qualifications would be a strong plus:  Proven experience in reverse engineering using analysis tools like IDA PR...