Associate Threat Researcher

Ensign is hiring !

Duties and Responsibilities

• Malware Analysis & Reverse Engineering:
• Perform in-depth static and dynamic analysis of complex malware samples to identify functionality, intent, and operational parameters.
• Overcome anti-analysis capabilities of advanced malware.
• Threat Actor Profiling & Attribution:
• Keep updated with latest developments in cyber campaigns and cyber threat actors’ tactics, techniques and procedures (TTPs).
• Research and develop novel techniques to track threat actors across high volume network telemetry.
• Analyze data and logs to discover threat actor clusters.
• Participate in threat analysis to correlate and attribute malware to threat actors.
• LLM & AI-Driven Research Augmentation:
• Develop and refine advanced prompt engineering frameworks and agentic workflows to parse mass telemetry, extract indicators of compromise (IoCs), and create effective detection rules.
• Integrate and utilize LLMs to automate workflow, contextualize data, and accelerate execution.
• Tools Development
• Develop and support tools that aid malware analysis and threat actor attribution.

Requirements

• Qualification: Bachelor degree in Computer Science/Information Systems/Computer Engineering or equivalent
• Professional Experience: Interest in malware analysis, reverse engineering, threat hunting, or cyber threat intelligence.
• Reverse Engineering Tools: Proficient in industry-standard tools, including modern disassemblers and debuggers
• Operating System Internals: Understanding of Windows, Linux, or Android internals.
• Threat Actor and Malware Knowledge:
• Understanding of adversary motivations, capabilities, and TTPs (Tactics, Techniques, and Procedures)
• Knowledge of modern offensive techniques, cutting-edge malware evasion techniques and communications behaviour.
• Scripting & AI Integration:
• Strong programming skills with the ability to develop tools that automate analysis.
• Hands-on experience with LLM APIs and AI orchestration frameworks to build research automation tools.
• Ability to document and report technical details/findings clearly and concisely