Senior Malware Analyst
Recorded Future· Engineering: Cyber Operations
Gothenburg, Swedenfull-timePosted 1mo ago
About the role
Senior Malware Analyst responsible for triage, static/dynamic analysis, YARA rule development, and feature improvements for Recorded Future’s malware analysis sandbox (Triage). Analyzes malware samples across Windows, macOS, and Android to produce actionable intelligence and detections.
Responsibilities
- Triage and investigate samples surfaced by the sandbox to discover new and emerging malware families.
- Perform static and dynamic analysis of malicious samples across Windows, macOS, and/or Android platforms.
- Write and maintain YARA rules to reliably detect malware families and variants.
- Develop and maintain configuration extractors to pull actionable intelligence (C2 servers, campaign IDs, encryption keys, etc.) from malware samples.
- Validate and tune detections to minimize false positives.
- Improve analysis methodology and tooling.
- Influence sandbox features based on malware research.
Qualifications
- Solid understanding of how sandbox systems work (behavioral analysis, hooking, monitoring, evasion detection, etc.)
- Strong knowledge of internals of Windows, Android, or macOS (multiple is a plus) - process/memory model, file formats, APIs, OS-level mechanisms abused by malware.
- Practical experience writing YARA rules, behavioral detection, and config extractors.
- Strong skills in Assembly language
- Comfortable working asynchronously and independently.
- Familiarity with the Go programming language
- Prior experience contributing to public or private detection rule sets
Skills
Required:YARA rule writingStatic and dynamic malware analysisSandbox technologiesAssembly language
Nice to have:Go programming
Last updated Sep 23, 2026. Interested? Apply on the company site.
About Recorded Future
The future of cyber defense is autonomous.
Get real-time, actionable cyber threat intelligence with Recorded Future. Mitigate cyber risks, prioritize threats, and proactively secure your business.
cyber threat intelligencesecuritythreat detectionAIresearch
More open roles at Recorded Future
- Account Director, Intelligence Community4d agoRemote · Public Sector
- Senior Sales Engineer, TOLA4d agoHybrid (Texas) · Sales: Presales
- Senior Sales Engineer, Public Sector4d agoWashington, DC · Sales: Presales
- Technical Account Manager (Korean Speaking)4d agoHybrid (Singapore) · TAM
- Product Support Solutions Developer4d agoWashington, DC · Customer Support