3 days ago
Remote, MalaysiaEntry Level
Responsibilities
- Design and develop automated security research and detection pipelines, including core automation functionality, threat ingestion workflows, and detection tooling.
- Own pipeline features and components from design and development through testing, false-positive validation, automation, and ongoing operational health.
- Build and harden automated threat analysis and detection-generation workflows, including sample triage, behavioral indicator extraction, and rule deployment.
- Deliver detection rules and pipeline services on time while meeting research goals and protection commitments.
- Implement resilience, scalability, and performance best practices for high-volume threat telemetry and sample-processing systems.
- Build and maintain instrumentation, logging, and dashboards for pipeline throughput, detection efficacy, and system health.
Requirements
- 0–2+ years of Python or backend software development experience; fresh graduates in computer science, cybersecurity, software engineering, or related fields are encouraged to apply.
- Solid understanding of Linux and/or Windows operating-system fundamentals and internals.
- Foundational knowledge of cybersecurity, malware behavior, common vulnerabilities including CVEs and OWASP, and threat analysis.
- Familiarity with detection mechanisms and rule formats such as YARA, Sigma, Snort, or behavioral signatures.
- Exposure to static or dynamic malware analysis, sandboxes such as Cuckoo or CAPE, or reverse-engineering tools such as Ghidra or IDA through coursework or CTFs.
- Strong Python development and debugging skills, or experience with Go or C++.
- Understanding of data structures, algorithms, and software design patterns.
- Experience with CI/CD pipelines, Git, GitHub Actions, or equivalent tools.
- Hands-on experimentation with large language models and agentic workflows.
- Knowledge of SQL and relational databases such as Postgres or MySQL.
- Familiarity with cloud services such as AWS or GCP, along with logging, telemetry, and monitoring tools.
- Strong written and verbal communication, collaboration, analytical ability, coachability, curiosity, and interest in threat intelligence, automated detection engineering, and security research software.
Benefits
- Retirement plans.
- Medical, dental, and vision coverage.
- Paid time off.
- Paid parental leave.
- Support for community involvement.
- Flexible work hours, social programs, and family-friendly benefits.
Tech Stack
About Trellix
Trellix is a global cybersecurity company delivering intelligence-led cyber resilience for security-conscious organizations at any stage of their journey. Transforming over 30 years of threat intelligence into high-fidelity detections and automating AI-driven detection and response across cloud, on-premises, air-gapped, and operational technology environments, Trellix helps customers adapt to the constantly evolving threat landscape. More at https://trellix.com.