Junior Malware Engineer

Jira ticket

We are looking for a Junior Malware Engineer to join Moonlock — someone with a strong research mindset, curious, and attentive to detail. This role is a good fit for an ambitious person who enjoys threat analysis, values accuracy, and likes connecting the dots to understand emerging global attack trends.

You will be part of a highly collaborative malware research team, working closely with teammates to gather threat intelligence, build threat collections, share findings, and continuously improve our detection pipeline in a fast-evolving threat landscape.

In this role, you will:

• Analyze malware samples and suspicious files under the guidance of senior engineers.
• Collect, organize, and validate indicators of compromise (IoCs) and threat intelligence data from public, internal, and open-source intelligence (OSINT) to help maintain malware knowledge bases.
• Assist in creating and improving malware detection rules, such as YARA.
• Investigate user-reported security incidents, support Customer Support with technical investigations of typical security-related cases, and help classify threats.
• Research emerging malware trends, attack techniques, and security technologies to identify broader threat trends and build collections based on similarity.
• Prepare research summaries and technical documentation, and assist in preparing articles or posts on the team's threat findings.

Skills you’ll need to bring:

• Basic understanding of malware concepts, common attack techniques (like phishing), and general cybersecurity principles.
• Basic knowledge of operating system fundamentals, including processes, memory management, filesystems, and permissions.
• Familiarity with macOS, Linux, or UNIX-like environments.
• Basic understanding of malware analysis methodologies, specifically static and dynamic analysis concepts.
• Familiarity with YARA or willingness to learn detection rule development.
• Strong research and analytical skills, with great attention to detail and a careful approach to work.
• Experience or comfort using AI tools to assist in data processing and automation.
• At least an Upper-Intermediate level of English and fluent Ukrainian.

As a plus:

• Experience with scripting or automation using Python, Bash, or a similar language.
• Hands-on experience with malware analysis through personal, academic, or professional projects.
• Understanding of Indicators of Compromise (IoCs), threat intelligence concepts, and the MITRE ATT&CK framework.
• Experience working with virtual machines and automated sandbox environments.