Associate Principal Malware Analyst

Dragos, Inc.

. Identify and assess highly sophisticated threats targeting ICS and critical infrastructure, evaluating their operational impact and severity.

Posted 11/4/2026full-timeRemote • United StatesMid-Level💰 $182,000 per yearWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in malware analysis and reverse engineering, with a strong focus on ICS-specific threats and the ability to develop detection methods and technical reports. Proficient in collaborating with cross-functional teams to enhance malware detection and analysis processes.

Highest-signal resume keywords

Malware AnalysisReverse EngineeringYara Signature DevelopmentICS-Specific Software AnalysisTechnical Report Writing

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Malware AnalysisReverse EngineeringStatic AnalysisDynamic AnalysisYara Signature DevelopmentICS-Specific Software AnalysisEmbedded Systems AnalysisMalware Detection AnalyticsMalware Analysis Pipeline ImprovementAnalytical Method Selection

Soft Skills

CollaborationIndependent JudgmentTechnical AdvisoryProblem SolvingClear Communication

Tools & Technologies

IDA ProGhidraX64dbgDisassemblersDebuggersDecompilers

Industry Keywords

ICSOT CybersecurityCritical InfrastructureThreat LandscapeThreat GroupsMalwareFirmwareSoftwareTechnical DocumentationOperational Impact

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Identify and assess highly sophisticated threats targeting ICS and critical infrastructure, evaluating their operational impact and severity.
Develop innovative analysis methods and conduct advanced reverse engineering and deobfuscation of ICS-specific malware, software, and firmware.
Create Yara signatures and partner closely with detection engineers to develop novel, ICS-specific threat detections.
Write customer-facing technical reports and internal documentation translating complex malware findings into clear operational impact.
Refine and evolve the malware analysis pipeline with new methods and procedures.
Collaborate with hunters, intelligence analysts, and detection engineers to drive malware-related threat research and solve complex technical problems.
Exercise independent judgment in selecting analytical methods and serve as a trusted technical advisor on complex malware analysis and detection questions.

Requirements

What you’ll need

5-8 years of experience in malware analysis, reverse engineering, or a related ICS/OT cybersecurity discipline.
Advanced proficiency in static and dynamic malware reverse engineering using tools such as disassemblers, debuggers, and decompilers (e.g., IDA Pro, Ghidra, x64dbg).
Demonstrated experience analyzing ICS-specific software, firmware, and embedded systems.
Strong Yara signature development skills, with experience building detection analytics for novel malware and attack techniques.
Proven ability to write clear, persuasive, customer-facing technical reports on complex malware findings.
Experience contributing to or improving a malware analysis pipeline, tooling, or workflow.
Comfortable collaborating with detection engineers, hunters, and intelligence analysts on cross-team technical problems.
Familiarity with ICS/OT protocols, threat groups, and the broader critical infrastructure threat landscape is a major plus.
All new hires must pass a background check as a condition of employment.

Benefits

Comp & perks

Competitive Equity Package
Comprehensive Benefits Plan
Remote-first work environment