Security Researcher – Supply Chain & Malware Analyst

About the role

We are seeking an experienced Security Researcher to join a cutting‑edge cybersecurity team focused on protecting modern software ecosystems. You will work on advanced supply‑chain threats, malware analysis, and the creation of open‑source tools that help organizations detect and mitigate risks before they cause damage.

Key responsibilities

• Conduct in‑depth research on software supply‑chain threats, emerging attack techniques, and advanced adversary behaviors.
• Analyze, reverse engineer, and investigate malware, vulnerabilities, and malicious packages.
• Design, build, and maintain open‑source tools for detection, analysis, and prevention of supply‑chain attacks.
• Research threat actors and APT groups, documenting tactics, techniques, and procedures.
• Translate technical findings into high‑quality research reports, whitepapers, and documentation.
• Lead research initiatives from concept through implementation, ensuring high standards of quality and innovation.
• Collaborate with engineering, product, and security teams to enhance detection capabilities and platform resilience.
• Continuously monitor evolving cybersecurity trends affecting open‑source and cloud‑native environments.

Required profile

• Minimum 5 years of experience in cybersecurity research, threat research, malware analysis, or vulnerability research.
• Strong software development background with a track record of delivering production‑quality tools.
• Deep understanding of the Software Development Lifecycle, DevSecOps, and modern CI/CD pipelines.
• Knowledge of software supply‑chain security and open‑source package ecosystems (npm, PyPI, Maven, etc.).

Required skills

• Malware analysis
• Reverse engineering
• Software supply‑chain security
• SDLC
• DevSecOps
• CI/CD
• npm, PyPI, Maven
• AI‑powered research tools