Posted on Aug 19, 2026Malware AnalystSpainMilanNozomi NetworksNozomi Networks is the leader in OT and IoT cybersecurity, keeping the world's critical infrastructure cyber resilient through real-time asset visibility, threat detection, and AI-powered analysis. We protect the toughest operational environments — from energy and healthcare to manufacturing and beyond.Job DescriptionAs we expand our product portfolio and general presence, our Security Research department is hiring a Malware Analyst to produce accurate threat intelligence and reverse-engineered samples that power solid, reliable detection signatures.You could be the next "Nozomier"! If this sounds like you, read on.In This Role, You Will:Perform hands-on static and dynamic analysis of malicious samples to understand their behaviour, capabilities, and intentCreate and tune various detection rules within our productPerform threat intelligence operations to collect and vet all the required knowledge to respond efficiently to advanced threatsOccasionally contribute to the technical material shared with the publicEmbody the Nozomi Networks Cultural Pillars and our mission to protect what matters most with transparency and trustTo Be Successful In This Opportunity,



You Will Have:Previous professional experience as a Detection Engineer, SOC Analyst, or Threat HunterProven hands-on experience with both static and dynamic malware analysis, including working in isolated/sandboxed environmentsDemonstrated experience analysing Windows malware, including a solid understanding of the Windows executable format (PE) and common execution, persistence, and evasion techniquesExperience analysing malware in Linux environments, including familiarity with the ELF format and Linux-specific persistence and execution techniques is a strong advantageProven experience in reverse engineering using analysis tools such as IDA Pro, Ghidra, OllyDBG, x64dbg, radare2, or similarA solid understanding of binary file attributes such as executable structures and packersExperience creating detection signatures such as YARA, Snort or Suricata, STIX, and SIGMAFamiliarity with the MITRE ATT&CK; framework and cyber kill chainsUnderstanding of the OSI model and an ability to use WiresharkWorking knowledge of PythonThe attitude to operate in environments including data covered by non-disclosure agreements and a high level of confidentiality
#J-18808-Ljbffr

📌 Malware Analyst (Gerona)
🏢 Tech Ladies®
📍 Gerona