Associate Security Researcher

Overview

Associate Security Researcher role contributing to the design, development and operation of automated security research and detection pipelines.

What you'll do

• Contribute to the design and development of automated security research and detection pipelines, driving core automation functionality, threat ingestion workflows, and detection tooling from concept through production.
• Take ownership of pipeline features and components, from initial design and development through rigorous testing, false-positive validation, automation, and ongoing operational health.
• Build, iterate on, and harden automated threat analysis and detection generation workflows, including automated sample triage, behavioral indicator extraction, and rule deployment across security engines.
• Ensure automated detection rules and pipeline services are delivered on time and to the highest quality standards, meeting research goals and protection commitments.
• Implement best practices for pipeline resilience, scalability, and performance across high-volume threat telemetry and sample processing systems.
• Build and maintain operational instrumentation, logging, and dashboards to monitor pipeline throughput, detection efficacy, and system health.

What you'll need

• 0–2+ years of experience in Python or backend software development (fresh graduates in Computer Science, Cybersecurity, Software Engineering, or related fields are strongly encouraged to apply).
• Strong interest in security research and automation.
• Solid understanding of Linux and/or Windows operating system fundamentals and internals is a must.
• Foundational understanding of cybersecurity concepts, malware behavior, common vulnerabilities (CVEs, OWASP), and threat analysis.
• Familiarity with threat detection mechanisms and rule formats (such as YARA, Sigma, Snort, or behavioral signatures).
• Exposure to static/dynamic malware analysis, sandboxes (e.g., Cuckoo/CAPE), or reverse engineering tools (Ghidra, IDA) through coursework or CTFs.
• Excellent development and debugging skills in Python (or Go / C++).
• Strong grasp of data structures, algorithms, and software design patterns.
• CI/CD pipeline experience (Git, GitHub Actions, or equivalent).
• Strong written communication for technical documentation and async collaboration.
• Ability to learn quickly and operate effectively in a fast-moving environment.
• SQL / relational databases such as Postgres or MySQL.
• Excellent communication and collaboration skills with the ability to work effectively across engineering, product, and security research teams.
• Ability to communicate technical concepts clearly to both engineering and research stakeholders.
• Strong analytical mindset, high coachability, and curiosity for solving complex security challenges through code.

Nice to have

• Hands-on experimentation with Large Language Models (LLMs) and agentic workflows.
• Cloud services familiarity (AWS or GCP).
• Logging, telemetry, and monitoring tools.
• Passion for threat intelligence, automated detection engineering, and scaling security research through software.

Details

• Remote, Malaysia.
• Flexible work hours.