5 months ago
Responsibilities
- Conduct in-depth behavioral analysis of Windows threats.
- Develop behavioral rules for hands-on-keyboard attacks, malware payloads, initial attack vectors, and advanced persistent threats.
- Produce threat-analysis reports for internal and external audiences.
- Analyze malware and anti-analysis techniques to help improve the sandbox environment.
- Develop cleanup rules to remove artifacts left by behavioral protection rules.
- Collaborate with cross-functional teams to improve behavioral protection capabilities.
- Guide and train junior team members and participate in peer code reviews.
- Develop tools to improve day-to-day malware research and analysis tasks.
Requirements
- Strong knowledge of Windows Internals, including memory management, processes, and threads.
- Proficiency in static and dynamic threat analysis using tools such as IDA Pro and WinDbg.
- Demonstrated programming experience; Python and Lua are preferred.
- Bachelor’s degree in computer software, preferably Computer Security, or equivalent experience.
- Excellent communication, analytical, problem-solving, strategic, and creative-thinking skills.
- Ability to explain complex technical problems to peer researchers and product engineering teams.
- Legal authorization to work in the UK jurisdiction without employer sponsorship.
Benefits
- Remote-first working model, with hybrid arrangements possible for some roles.
- Legal authorization to work in the UK jurisdiction is required without employer sponsorship.
- Employee-led diversity and inclusion networks.
- Annual charity, fundraising, and volunteer days.
- Global sustainability initiatives.
- Global fitness and trivia competitions.
- Global wellbeing days.
- Monthly wellbeing webinars and training.
About Sophos
Sophos, a global cybersecurity leader, defends more than 625,000 organizations worldwide with Sophos Fusion, the industry's first and most complete AI-native cybersecurity defense system: a single, connected architecture where every control point operates as one. Powered by agentic AI and elite human expertise, Sophos detects, investigates, and neutralizes threats before they become business-disrupting events. Working alongside a global ecosystem of managed service providers, resellers, and technology partners, Sophos compounds intelligence from every threat encountered and every environment defended to make every customer's defense stronger than the last. More information is available at www.sophos.com.