Associate Principal Malware Analyst at Dragos
United States
<div class="content-intro"><p><span class="TextRun SCXW107525881 BCX8" lang="EN-US" data-contrast="none"><span class="NormalTextRun SCXW107525881 BCX8">At Dragos, the mission is personal. The systems we protect deliver the water you drink, power your home, and keep the hospitals your community depends on running. Those critical infrastructure systems that power our civilization around the world are under attack every day by adversaries. When those systems fail, people are </span><span class="NormalTextRun SCXW107525881 BCX8">immediately</span><span class="NormalTextRun SCXW107525881 BCX8"> at risk. </span><span class="NormalTextRun SCXW107525881 BCX8">We are the global leader in </span><span class="NormalTextRun SCXW107525881 BCX8">xOT</span><span class="NormalTextRun SCXW107525881 BCX8"> cybersecurity, combining technology, threat intelligence, and expert services. The people here chose this work because they understand </span><span class="NormalTextRun SCXW107525881 BCX8">what is</span><span class="NormalTextRun SCXW107525881 BCX8"> at stake</span><span class="NormalTextRun SCXW107525881 BCX8">. Here, you will find a remote-first mission-driven team across North America, Europe, the Middle East, and APAC built on authenticity, transparency, and trust. If safeguarding the systems that protect your family, friends, and community is the kind of work that matters to you, you are in the right place.</span></span><span class="EOP Selected SCXW107525881 BCX8" data-ccp-props="{"134233117":false,"134233118":false,"201341983":0,"335551550":1,"335551620":1,"335559685":0,"335559737":0,"335559738":120,"335559739":160,"335559740":360}"> </span></p></div><p><strong><span data-contrast="auto">About the Role</span></strong><span data-contrast="auto">:</span><span data-ccp-props="{}"> </span></p> <p><span data-ccp-props="{}">The Dragos Malware Analysis team provides critical defense against the most sophisticated threats targeting critical infrastructure by analyzing adversary tools, building detections, and delivering intelligence that shapes how the industry understands ICS security. As an Associate Principal Malware Analyst, you'll lead deep-dive analysis of ICS-related malware and firmware, develop novel detection methods, and produce Yara signatures and technical reports that translate findings into action. You'll partner closely with detection engineers, hunters, and intelligence analysts to turn your research into deployable defenses while helping refine the malware analysis pipeline itself. This is a role where your expertise directly impacts how Dragos and the wider industry detect and defend against the most consequential threats in the space.</span></p> <p><strong><span data-contrast="auto">Responsibilities</span></strong><span data-contrast="auto">:</span><span data-ccp-props="{}"> </span></p> <ul> <li class="font-claude-response-body whitespace-normal break-words pl-2">Identify and assess highly sophisticated threats targeting ICS and critical infrastructure, evaluating their operational impact and severity.</li> <li class="font-claude-response-body whitespace-normal break-words pl-2">Develop innovative analysis methods and conduct advanced reverse engineering and deobfuscation of ICS-specific malware, software, and firmware.</li> <li class="font-claude-response-body whitespace-normal break-words pl-2">Create Yara signatures and partner closely with detection engineers to develop novel, ICS-specific threat detections informed by deep malware analysis findings.</li> <li class="font-claude-response-body whitespace-normal break-words pl-2">Write persuasive customer-facing technical reports and internal documentation that translates complex malware findings into clear operational impact for diverse audiences.</li> <li class="font-claude-response-body whitespace-normal break-words pl-2">Refine and evolve the malware analysis pipeline with new methods and procedures to address emerging techniques and tooling as they surface in the threat landscape.</li> <li class="font-claude-response-body whitespace-normal break-words pl-2">Collaborate across teams—with hunters, intelligence analysts, and detection engineers—to drive malware-related threat research and solve complex technical problems.</li> <li class="font-claude-response-body whitespace-normal break-words pl-2">Exercise independent judgment in selecting analytical methods and serve as a trusted technical advisor on complex malware analysis and detection questions across the organization.</li> </ul> <p><strong><span data-contrast="auto">Qualifications</span></strong><span data-contrast="auto">:</span> <span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1"><span data-contrast="none">5-8 years of experience in malware analysis, reverse engineering, or a related ICS/OT cybersecurity discipline.</span></li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Advanced proficiency in static and dynamic malware reverse engineering using tools such as disassemblers, debuggers, and decompilers (e.g., IDA Pro, Ghidra, x64dbg).</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Demonstrated experience analyzing ICS-specific software, firmware, and embedded systems.</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Strong Yara signature development skills, with experience building detection analytics for novel malware and attack techniques.</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Proven ability to write clear, persuasive, customer-facing technical reports on complex malware findings.</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Experience contributing to or improving a malware analysis pipeline, tooling, or workflow.</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Comfortable collaborating with detection engineers, hunters, and intelligence analysts on cross-team technical problems.</li> <li data-leveltext="•" data-font="" data-listid="2" data-list-defn-props="{"335552541":1,"335559685":720,"335559991":360,"469769242":[8226],"469777803":"left","469777804":"•","469777815":"hybridMultilevel"}" data-aria-posinset="12" data-aria-level="1">Familiarity with ICS/OT protocols, threat groups, and the broader critical infrastructure threat landscape is a major plus. </li> </ul> <p><strong><span data-contrast="auto">Compensation</span></strong><span data-contrast="auto">:</span><span data-ccp-props="{}"> </span></p> <ul> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1"><span data-contrast="none">Salary: $182,000 </span><span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335557856":16777215,"335559738":0,"335559739":0}"> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Competitive Equity Package <span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335557856":16777215,"335559738":0,"335559739":0}"> </span></li> <li data-leveltext="" data-font="Symbol" data-listid="3" data-list-defn-props="{"335552541":1,"335559683":0,"335559684":-2,"335559685":720,"335559991":360,"469769226":"Symbol","469769242":[8226],"469777803":"left","469777804":"","469777815":"hybridMultilevel"}" data-aria-posinset="1" data-aria-level="1">Comprehensive Benefits Plan<span data-ccp-props="{"134233117":false,"134233118":false,"335551550":0,"335551620":0,"335557856":16777215,"335559738":0,"335559739":0}"> </span></li> </ul> <p><span data-ccp-props="{}"> </span></p> <p><span data-contrast="none">#LI-JF1 #LI-REMOTE </span> <span data-ccp-props="{}"> </span></p> <p> </p> <p> </p><div class="content-conclusion"><p>Dragos is an Equal Opportunity Employer and considers applicants for employment without regard to race, color, religion, sex, orientation, national origin, age, disability, genetics, or any other basis forbidden under federal, state, or local laws. All new hires must pass a background check as a condition of employment.</p></div>
Apply Now
