Cybersecurity Researcher

About Acronis

Acronis is a world leader in cyber protection, delivering natively integrated solutions that monitor, control, and protect the data that businesses and lives depend on. Driven by our passion to protect every workload, we’ve built the industry’s only all-in-one cyber protection platform. We are looking for a Cybersecurity Researcher to join our mission of protecting the digital world.

As a Cybersecurity Researcher, you will be part of the global Threat Research Unit, fighting against modern cyber threats and cybercriminals by dissecting complex campaigns, reverse engineering malicious content, and creating detection logic for Acronis products. As an expert in cyber threats, you will participate in the development of new threat detection technologies, including various automation and machine learning methods.

What You'll Do as a Cybersecurity Researcher

• Participate in design and implementation of detection capabilities of Acronis Security and EDR products.
• Analyse clean and malicious content: executables, scripts, various document formats, websites, memory dumps, vulnerabilities.
• Develop, support, and fine-tune threat detection logic and signatures.
• Conduct online research of the latest cyber threats and ensure those can be detected by existing in-house technologies.
• Contribute to sharing research results in blog posts and articles.
• Monitor automated detection pipelines to ensure high detection accuracy.
• Support scan engine and product development by participating in joint research projects.

What You Bring

• Understanding of modern cyber-attack techniques, common types of malwares, OS internals (primarily Windows, macOS and Linux is a plus), and network protocols.
• 5+ years' experience in malware analysis (executables, scripts, document formats, exploits): static (e.g. IDA Pro, Ghidra), dynamic (e.g. x64dbg, OllyDBG), and behavioral (e.g. Cuckoo, CAPE).
• 3+ years' experience with proactive Threat Hunting (using multiple EDR/XDR solutions)- Network traffic analysis (Wireshark).
• Extensive experience working with threat intelligence tools and services: VirusTotal, Shodan, Censys, MISP (or similar feed collections), analysis with MITRE ATT&CK framework.
• 3+ years' experience working for a well-established security vendor.
• Software development experience: Python, REST APIs, SQL, Regular expressions. C/C++ would be considered a plus.
• Flexibility and proven ability to learn new things and develop skills fast.
• Analysis, critical thinking, and problem-solving skills.
• Unbeatable curiosity.
• Good reading and writing skills in English.

Key skills/competency

• Cybersecurity
• Threat Analysis
• Detection Engineering
• Malware Analysis
• Reverse Engineering
• Threat Hunting
• Python
• Network Protocols
• OS Internals (Windows)
• MITRE ATT&CK