Threat Researcher, Sophos

• Deep knowledge of Linux operating system, internals and APIs
• Experience in computer security and/or threat research
• Dynamic and static malware analysis experience
• Programming experience
• At Sophos, we believe in the power of diverse perspectives to fuel innovation. Research shows that candidates sometimes hesitate to apply if they don't check every box in a job description. We challenge that notion. Your unique experiences and skills might be exactly what we need to enhance our team. Don't let a checklist hold you back – we encourage you to apply

Desirable

• Sophos is looking for a Linux Threat Researcher to join our team! The ideal candidate has extensive knowledge of Linux internals, is fluent in assembly, and has a knack for getting to the bottom of any issue. You enjoy thinking creatively; combining your deep technical knowledge, your tenacity for innovation, and your can-do attitude to solve complex and challenging problems on a daily basis
• As a member of the Linux Behavior Protection Team, you will be responsible for:
• Implementing context-aware & behavior-based detection to provide multiple layers of protection from attacks targeting Linux infrastructure
• Mapping protection & detection of attack behaviors to MITRE ATT&CK framework
• Linux kernel exploit research and detection
• Threat hunting, data mining, and using other methods of research to discover new threats to Linux and opportunities to improve protection
• Working with product teams to adapt protection technology to the rapidly evolving threat landscape
• Reverse engineering and debugging malware, understanding the complete end-to-end kill chain, from attack vector to persistent payload
• Publish research articles and whitepapers on the corporate blog