5 months ago
Responsibilities
- Conduct in-depth behavioral analysis of Windows threats.
- Develop Behavioral rules for various threat behaviors.
- Produce quality threat analysis reports for internal and external audiences.
- Assist in sandbox improvements by analyzing malware.
- Develop Cleanup rules to remove artifacts left by behavioral protection rules.
- Collaborate with cross-functional teams to improve behavioral protection capability.
- Guide and train junior team members in malware analysis.
- Assist in the development of tools to improve day-to-day tasks.
Requirements
- Strong knowledge of Windows Internals including Memory management, Processes, and Threads.
- Proficiency in static and dynamic analysis of threats using tools like IDAPro and WinDbg.
- Demonstrated programming experience, preferably in Python or Lua.
- Excellent communication skills to convey complex technical problems.
- Strong analytical and problem-solving skills with strategic thinking.
- Bachelor’s degree in computer software or equivalent experience.
Benefits
- Remote-first working model with some roles requiring a hybrid approach.
- Employee-led diversity and inclusion networks.
- Annual charity initiatives and volunteer days.
- Global employee sustainability initiatives.
- Global fitness and trivia competitions.
- Monthly wellbeing webinars and training.
About Sophos
Sophos, a global cybersecurity leader, defends more than 625,000 organizations worldwide with Sophos Fusion, the industry's first and most complete AI-native cybersecurity defense system: a single, connected architecture where every control point operates as one. Powered by agentic AI and elite human expertise, Sophos detects, investigates, and neutralizes threats before they become business-disrupting events. Working alongside a global ecosystem of managed service providers, resellers, and technology partners, Sophos compounds intelligence from every threat encountered and every environment defended to make every customer's defense stronger than the last. More information is available at www.sophos.com.