Conduct in-depth behavioral analysis of Windows threats
Develop Behavioral rules for various threat behaviors including hands-on keyboard attack, malware payloads, initial attack vectors and Advanced Persistent Threats (APTs)
Produce quality threat analysis reports for both internal and external audience
Assist in sandbox improvements by analyzing malware that hinders the sandbox environment in running the threat, which deploys various anti-analysis techniques
Develop Cleanup rules to remove artifacts that are left behind by the behavioral protection rules
Collaborate with other cross-functional teams to improve behavioral protection capability based on the threat analysis
Guide and train junior team members in assisting malware analysis, peer code review
Assist in the development of tools wherever necessary to improve day-to-day task

Strong knowledge of Windows Internals including Memory management, Processes, Threads
Proficiency in both static and dynamic analysis of threats, using tools such as IDAPro, WinDbg
Demonstrated programming experience. Preferred: Python, Lua
Excellent communication skills with the ability to demonstrate complex technical problem to peer researchers as well as to product engineering team
Excellent analytical and problem-solving skills with the ability to think strategically and creatively
Bachelor’s degree in computer software (Computer Security preferable) or equivalent experience

Sophos operates a remote-first working model
Employee-led diversity and inclusion networks that build community and provide education and advocacy
Annual charity and fundraising initiatives and volunteer days for employees to support local communities
Global employee sustainability initiatives to reduce our environmental footprint
Global fitness and trivia competitions to keep our bodies and minds sharp
Global wellbeing days for employees to relax and recharge
Monthly wellbeing webinars and training to support employee health and wellbeing

Senior Threat Behavior Researcher

Key skills