Senior Security Researcher

Overview

Detect, triage and analyze malicious open source software components across public package ecosystems, assessing their scope, intent and impact, and publish external-facing research on emerging threats.

What you'll do

• Triage and assess incoming malware alerts for malicious open source packages across ecosystems such as npm, PyPI and Maven.
• Review Indicators of Compromise (IoCs) and maintain threat campaign records tracking attacker infrastructure, tactics and patterns over time.
• Perform in-depth technical analysis of suspicious packages, including reverse-engineering obfuscated code and identifying malicious behaviors such as exfiltration, backdoors, dependency confusion and typosquatting.
• Produce detailed internal assessments of analyzed threats.
• Author and publish external-facing content, including blog posts, technical write-ups and security advisories, for both technical and non-technical audiences.
• Collaborate with internal teams to feed findings into detection pipelines, enrich the vulnerability and threat database, and improve automated detection coverage.

What you'll need

• Bachelor's degree in engineering or a related field.
• At least 3 years of hands-on professional experience specifically in malware analysis, threat intelligence, or open source package security.
• Demonstrated experience triaging security alerts at scale and working within or alongside a SOC or threat intelligence team.
• Hands-on experience reviewing and interpreting IoCs (file hashes, domains, IPs, behavioral signatures) and maintaining threat campaign tracking.
• Proficiency in reading and analyzing code across Python, JavaScript/TypeScript, Java and Go, including obfuscated or minified code.
• Experience producing external security communications such as blog posts, advisories or technical reports intended for a public or customer-facing audience.
• Understanding of package manager ecosystems and common attack patterns such as typosquatting, dependency confusion and malicious install scripts.

Nice to have

• Experience contributing to or operating threat intelligence platforms or malware databases.
• Familiarity with static and dynamic analysis tooling such as sandboxes, YARA rules and SAST tools.
• Understanding of software supply chain security standards and frameworks such as SLSA and SSDF.
• Prior public research, CVE credits or published malware findings.
• Security certifications such as GREM (GIAC Reverse Engineering Malware) or equivalent.

Details

• Location: Bengaluru, India.