Malware Intelligence Analyst

Jobgether

6d • Remote

About The Position

This is an exciting opportunity to join a globally distributed cybersecurity team protecting hundreds of thousands of web servers from evolving online threats. As a Malware Intelligence Analyst, you will reverse-engineer real-world web malware, uncover attacker techniques, and transform your findings into high-precision detection signatures. Your work will directly contribute to safeguarding websites ranging from small CMS deployments to large-scale infrastructure environments. Operating within a 24/7 malware processing pipeline, you’ll collaborate across time zones to ensure rapid threat response and continuous coverage. This fully remote role offers a fixed schedule aligned with your time zone, empowering you to deliver meaningful impact while maintaining balance. If you are passionate about dissecting malicious code and strengthening web security at scale, this role offers both challenge and purpose.

Requirements

• Strong expertise in PCRE regex, including advanced constructs, performance optimization, and accurate pattern design.
• Minimum 3 years of experience working with PHP and/or JavaScript, with the ability to read, analyze, and differentiate between legitimate and malicious code.
• Hands-on experience with web malware reverse engineering, deobfuscation techniques, and payload unpacking.
• Solid understanding of common web attack vectors (e.g., injection attacks, XSS, RCE, file upload exploits) and their behavior in hosting environments.
• Familiarity with web server architectures and shared hosting ecosystems (Apache, Nginx, LiteSpeed, reverse proxies, PHP handlers, WAFs, Linux file systems, namespaces, cgroups).
• Upper-intermediate or higher English proficiency.

Nice To Haves

• Additional assets include experience with WordPress internals, website incident response, penetration testing, Python scripting, YARA rules, or hosting control panels (cPanel, Plesk, DirectAdmin).
• Strong analytical thinking, curiosity about attacker methodologies, and the ability to work independently in a remote environment.

Responsibilities

• Analyze, classify, and prioritize web-based malware threats, including obfuscated PHP backdoors, JavaScript injections, SEO spam, redirectors, and cryptominers targeting hosting environments.
• Reverse-engineer malicious PHP and JavaScript code to uncover attacker techniques and extract reliable detection patterns.
• Develop, test, and refine high-precision PCRE-based detection signatures for production scanning engines, minimizing false positives while maximizing coverage.
• Maintain strict service-level agreements (SLAs) as part of a globally distributed team providing continuous 24/7 malware coverage.
• Research emerging attack vectors such as CMS exploitation techniques, plugin/theme supply-chain compromises, and zero-day delivery methods.
• Contribute to improving internal processes, tooling, and automation to enhance detection efficiency and scalability.

Benefits

• Fully remote position with a fixed 5-day workweek (5 on / 2 off) aligned with your time zone — no mandatory rotation.
• 24 paid vacation days annually, plus 10 national holidays and unlimited sick leave.
• Additional compensation or extra vacation days for weekends and public holidays worked within your schedule.
• Private medical insurance compensation.
• Co-working space and gym/sports reimbursement.
• Performance-based recognition, including rewards for innovative ideas eligible for patenting.
• Structured onboarding and modern tooling to support continuous professional growth.

What This Job Offers

• Job Type: Full-time
• Career Level: Mid Level
• Education Level: No Education Listed