Windows Malware Researcher

SD Solutions

. Review cybersecurity prompts submitted to an AI system that could not confidently classify them as benign or malicious .

Posted 10/22/2026full-timeRemote • Poland, BulgariaMid-LevelSeniorWebsite

Core Competencies

Role fit

Core Competencies

Use this summary to align your resume positioning with the role.

Expertise in Windows Malware Analysis and Research, with a strong command of Windows Internals and the Win32/NT API. Proficient in static and dynamic analysis techniques, YARA rule writing, and clear documentation of analytical judgments.

Highest-signal resume keywords

Windows Malware AnalysisWin32/NT API ProficiencyStatic And Dynamic AnalysisYARA Rule WritingAnalytical Judgment

ATS Keywords

Tailor your resume

Applicant Tracking System Keywords

Tip: use these terms in your resume and cover letter to boost ATS matches.

Hard Skills

Windows InternalsProcess InjectionPrivilege EscalationEDR/AV Evasion TechniquesPE File AnalysisUnpackingDeobfuscationMalware Families KnowledgeMITRE ATT&CK MappingIncident Response

Soft Skills

Clear Written CommunicationAnalytical Judgment

Tools & Technologies

X64dbgIDAGhidraSandboxesDebuggers

Certifications & Qualifications

GIAC GREMECMAPGIAC GCFA

Industry Keywords

CybersecurityAI SafetyMalware ResearchThreat IntelligenceBug Bounty Programs

Tech Stack

Tools & technologies

Cyber Security

About the role

Key responsibilities & impact

Review cybersecurity prompts submitted to an AI system that could not confidently classify them as benign or malicious
Determine the underlying intent and goal behind each prompt and assess whether the purpose is legitimate or harmful
Apply deep domain expertise to judge technical context, specificity, and real-world uplift a response would give an attacker
Annotate each prompt with an intent label and clear written rationale according to project guidelines
Independently annotate the same prompts as a second researcher
Escalate cases where researchers disagree to a reviewer
Flag ambiguous cases, emerging attack techniques, and gaps in guidelines
Help improve project guidelines
Contribute to specialized AI safety and robustness evaluation infrastructure through scenario and environment development

Requirements

What you’ll need

Minimum of 5 years of proven, hands-on experience in Windows malware analysis and research
Strong command of Windows internals and the Win32/NT API, including process injection, persistence, privilege escalation, and EDR/AV evasion techniques
Experience with static and dynamic analysis of PE files, including unpacking, deobfuscation, and use of sandboxes and debuggers such as x64dbg, IDA, and Ghidra
Experience with major malware families and categories: loaders, infostealers, RATs, ransomware, and C2 frameworks
Ability to write YARA rules and extract IOCs and TTPs mapped to MITRE ATT&CK
Strong analytical judgment to infer a user's underlying goal from a short prompt and distinguish defensive, educational, and research use from attack preparation
Clear written communication in English and ability to document reasoning concisely
GIAC GREM, eCMAP, or GIAC GCFA certifications are nice to have
Demonstrated online achievements, write-ups, or contributions on HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research are nice to have

Benefits

Comp & perks

Benefits offered by SD Solutions; details available by contacting the company
Freelance contributor pool opportunity for scenario and environment development