Senior Malware Researcher

at Halcyon
💰 $180k-$240k

Job description

What we do:

Halcyon is the industry’s first dedicated, adaptive security platform that combines multiple proprietary advanced prevention engines along with AI models focused specifically on stopping ransomware.

Who we are:

Halcyon was formed in 2021 by a team of cyber industry veterans after battling the scourge of ransomware (and advanced threats) for years at some of the largest global security vendors. Comprised of leaders from Cylance (now Blackberry), Accuvant (now Optiv), Fireye and ISS X-Force (now IBM), Halcyon is focused on building products and solutions for mid-market and enterprise customers.

As a remote-native, completely distributed global team, we recognize great talent can exist anywhere. We invite you to apply to a job you’re interested in and we’ll work a plan to meet your needs.

The Role:

Halcyon’s goal is to deliver an anti-ransomware solution that breaks new ground as to what a security product can deliver. Aligned with this goal, Halcyon is looking for a Senior Malware Researcher focused on ransomware analysis. In this role, you will lead complex ransomware research efforts on Windows and Linux systems, mentor other researchers, and drive the development of advanced tools and decryptors. You will also set research priorities, identify emerging threats, and work closely with other teams to ensure our detection and recovery strategies remain ahead of the threat landscape. Your work will significantly influence our product capabilities and provide exceptional protection for our customers.

Responsibilities:

  • Lead in-depth analysis of Windows and Linux malware samples, with a particular focus on ransomware. This includes static and dynamic analysis to understand the behavior, mechanisms, and objectives of the malware.

  • Set research direction by identifying ransomware trends, prioritizing analysis targets, and proposing enhancements to detection and recovery capabilities.

  • Create comprehensive reports detailing ransomware analysis findings, including encryption methods, identification of encryption flaws, ransom note patterns, indicators of compromise (IOCs), and recommended decryption or mitigation strategies.

  • Design, develop, and validate advanced decryptors, including those requiring novel cryptographic analysis or exploitation of implementation flaws.

  • Design and develop tools to automate malware analysis tasks, streamline workflows, and enhance overall efficiency in malware research activities.

  • Mentor and review the work of other researchers, providing technical guidance and ensuring the quality and accuracy of deliverables.

  • Provide expert support to other teams within the organization, answering malware-related queries.

  • Represent Halcyon in the security community through technical blogs, conference presentations, and research publications.

Skills and Qualifications:

  • Extensive experience in analyzing both Windows and Linux malware, with deep expertise in ransomware behaviors, encryption algorithms, and evasion techniques.

  • Advanced proficiency in reverse engineering tools such as IDA Pro, Ghidra, Binary Ninja, x64dbg, WinDbg, and GDB.

  • Expertise in writing and optimizing YARA rules to detect and classify malware effectively.

  • Strong programming skills in languages such as Python, C, or C++, with experience building analysis tools and automation frameworks.

  • Familiarity with threat intelligence platforms (VirusTotal, MalwareBazaar, Any.Run, etc.) and ability to correlate malware findings with broader threat landscapes.

  • Proven ability to collaborate across teams and translate technical research into actionable detection and product improvements.I

  • Excellent technical writing skills to document analysis findings clearly and concisely.

Bonus Skills and Qualifications:

  • Experience in Rust programming.

  • Experience in applying machine learning techniques and feature engineering to malware classification and detection.

  • Experience in writing technical blog posts and delivering presentations at conferences on topics related to malware research.

Benefits:

Halcyon offers the following benefits to eligible employees:

  • Comprehensive healthcare (medical, dental, and vision) with premiums paid in full for employees and dependents.

  • 401k plan with a generous employer contribution.

  • Short and long-term disability coverage, basic life and AD&D insurance plans.

  • Medical and dependent care FSA options.

  • Flexible PTO policy.

  • Parental leave.

  • Generous equity offering.

The Company reserves the right to modify or change these benefits programs at any time, with or without notice.​

Base Salary Range: $180,000 - $240,000

In accordance with applicable state and federal laws, the range provided is Halcyon’s reasonable estimate of the base compensation for this role. The actual amount may differ based on non-discriminatory factors such as experience, knowledge, skills, abilities, and location. Base pay is one part of the total package that is provided to compensate and recognize employees for their work, and this role may be eligible for additional discretionary bonuses/incentives, and equity in the Company.

We understand it takes a diverse team of highly intelligent, passionate, curious, and creative people to develop the exceptional product we are building. Our dynamic team has incredible perspectives to share, just as we know you do, and we take great pride in being an equal opportunity employer.

Share this job:
Please let Halcyon know you found this job on Remote First Jobs 🙏

Similar Remote Jobs

Benefits of using Remote First Jobs

Discover Hidden Jobs

Unique jobs you won't find on other job boards.

Advanced Filters

Filter by category, benefits, seniority, and more.

Priority Job Alerts

Get timely alerts for new job openings every day.

Manage Your Job Hunt

Save jobs you like and keep a simple list of your applications.

Search remote, work from home, 100% online jobs

We help you connect with top remote-first companies.

Search jobs

Hiring remote talent? Post a job

Frequently Asked Questions

What makes Remote First Jobs different from other job boards?

Unlike other job boards that only show jobs from companies that pay to post, we actively scan over 20,000 companies to find remote positions. This means you get access to thousands more jobs, including ones from companies that don't typically post on traditional job boards. Our platform is dedicated to fully remote positions, focusing on companies that have adopted remote work as their standard practice.

How often are new jobs added?

New jobs are constantly being added as our system checks company websites every day. We process thousands of jobs daily to ensure you have access to the most up-to-date remote job listings. Our algorithms scan over 20,000 different sources daily, adding jobs to the board the moment they appear.

Can I trust the job listings on Remote First Jobs?

Yes! We verify all job listings and companies to ensure they're legitimate. Our system automatically filters out spam, junk, and fake jobs to ensure you only see real remote opportunities.

Can I suggest companies to be added to your search?

Yes! We're always looking to expand our listings and appreciate suggestions from our community. If you know of companies offering remote positions that should be included in our search, please let us know. We actively work to increase our coverage of remote job opportunities.

How do I apply for jobs?

When you find a job you're interested in, simply click the 'Apply Now' button on the job listing. This will take you directly to the company's application page. We kindly ask you to mention that you found the position through Remote First Jobs when applying, as it helps us grow and improve our service 🙏

Apply