Associate Threat Researcher

Ensign is hiring !

Duties and Responsibilities:

• Malware Analysis & Reverse Engineering:
  • Perform in-depth static and dynamic analysis of complex malware samples to identify functionality, intent, and operational parameters.
  • Overcome anti-analysis capabilities of advanced malware.
• Threat Actor Profiling & Attribution:
  • Keep updated with latest developments in cyber campaigns and cyber threat actors’ tactics, techniques and procedures (TTPs). 
  • Research and develop novel techniques to track threat actors across high volume network telemetry.
  • Analyze data and logs to discover threat actor clusters.
  • Participate in threat analysis to correlate and attribute malware to threat actors. 
• LLM & AI-Driven Research Augmentation:
  • Develop and refine advanced prompt engineering frameworks and agentic workflows to parse mass telemetry, extract indicators of compromise (IoCs), and create effective detection rules.
  • Integrate and utilize LLMs to automate workflow, contextualize data, and accelerate execution. 
• Tools Development
  • Develop and support tools that aid malware analysis and threat actor attribution.

Requirements:

• Qualification: Bachelor degree in Computer Science/Information Systems/Computer Engineering or equivalent 
• Professional Experience: Interest in malware analysis, reverse engineering, threat hunting, or cyber threat intelligence.
• Reverse Engineering Tools: Proficient in industry-standard tools, including modern disassemblers and debuggers 
• Operating System Internals: Understanding of Windows, Linux, or Android internals.
• Threat Actor and Malware Knowledge:
  • Understanding of adversary motivations, capabilities, and TTPs (Tactics, Techniques, and Procedures)
  • Knowledge of modern offensive techniques, cutting-edge malware evasion techniques and communications behaviour.
• Scripting & AI Integration:
  • Strong programming skills with the ability to develop tools that automate analysis.
  • Hands-on experience with LLM APIs and AI orchestration frameworks to build research automation tools.
• Ability to document and report technical details/findings clearly and concisely