Senior Threat Researcher - Threatlabz

About the role

This role focuses on analyzing emerging cyber threats, particularly those originating from browsers, and developing robust protection mechanisms. The work involves deep dives into web attack techniques, DOM/JS analysis, and understanding browser security to identify and counter new vulnerabilities. A key part of the job is creating detection signatures and strategies to safeguard users globally.

The Senior Threat Researcher will also conduct static and dynamic malware analysis, using debugging and reverse engineering tools to understand threat behavior. This includes researching vulnerabilities across various categories like OWASP and Web API. The insights gained from this research are critical for enhancing Zscaler's Zero Trust Exchange platform.

Success in this position means not only identifying threats and developing protections but also contributing to the broader security community. This involves developing automation tools to integrate research findings into Zscaler's systems and sharing threat intelligence through blogs. The ideal candidate will leverage their expertise to amplify the impact of intelligent systems in staying ahead of evolving threats.

The annual salary for this position is between $120,000 and $240,000 USD.

Skills that matter here

• Python: This language is used for developing automation tools to integrate research findings and streamline threat analysis processes.
• Ruby: This language is part of the required technical stack, indicating its use in various development or scripting tasks within the role.
• Go: This language is listed as a skill, suggesting its application in building tools or systems for threat research and analysis.
• Shell: Shell scripting is essential for automating tasks and managing systems related to threat research and analysis.
• IDA: This tool is used for malware debugging and reverse engineering to understand the inner workings of malicious software.
• x64dbg: This debugger is utilized for detailed analysis of malware, helping to uncover its behavior and develop countermeasures.

Who this role suits

• A person with at least two years of experience specifically in cybersecurity research.
• Someone who possesses strong expertise in analyzing web attacks and understanding browser security mechanisms.
• An individual proficient in malware debugging and reverse engineering techniques.
• A contributor who is comfortable sharing insights and research findings with the global security community.

From the employer

• Analyze browser-based threats to develop robust protections.
• Research vulnerabilities across OWASP, Web API, and LLM Top 10.
• Conduct static and dynamic malware analysis.
• Develop automation tools to integrate research findings.
• Contribute to the global security community with threat analysis blogs.

• 2+ years of experience in Cyber Security Research.
• Expertise in web attack and DOM/JS analysis.
• Proficiency in browser security and payload analysis.
• Experience with malware debugging and reverse engineering.
• Strong understanding of TCP/IP and application layer protocols.

• Various health plans.
• Time off plans for vacation and sick time.
• Parental leave options.
• Retirement options.
• Education reimbursement.
• In-office perks.