Windows Malware Researcher

What you'll do

● Review cybersecurity prompts submitted to an AI system that the system could not

confidently classify as benign or malicious

● Determine the underlying intent and goal behind each prompt, and assess whether the

user is pursuing a legitimate purpose or an intent to cause harm

● Apply deep domain expertise to judge the technical context, specificity, and real-world

uplift a response would give an attacker

● Annotate each prompt with an intent label and a clear written rationale, following the

project guidelines

● Independently annotate the same prompts as a second researcher; cases where

researchers disagree are escalated to a reviewer

● Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and

help improve them

Requirements

● Minimum of 5 years of proven, hands-on experience in Windows malware analysis and

research

● Strong command of Windows internals and the Win32/NT API, including process

injection, persistence, privilege escalation, and EDR/AV evasion techniques

● Static and dynamic analysis of PE files, including unpacking, deobfuscation, and

sandbox and debugger use (x64dbg, IDA, Ghidra)

Experience with major malware families and categories

loaders, infostealers, RATs,

ransomware, and C2 frameworks

● Ability to write YARA rules and extract IOCs and TTPs mapped to MITRE ATT&CK

Strong analytical judgment

able to infer a user's underlying goal from a short prompt

and separate defensive, educational, and research use from attack preparation

● Clear written communication in English, with the ability to document your reasoning

concisely

Nice to have

● GIAC GREM, eCMAP, GIAC GCFA

● Demonstrated online achievements, write-ups, or contributions on platforms such as

HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security

research.

View the original posting and apply on Jobs Sniper.