Malware Intelligence Analyst

Imunify360 Security Suite is a product of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers.

Local

São Paulo - SP

Remoto

Responsabilidades

• Analyze and classify web malware: PHP shells, JavaScript injectors, WordPress backdoors, SEO spam, redirectors, cryptominers, and other threats targeting the hosting ecosystem
• Reverse-engineer obfuscated PHP and JavaScript to understand attacker techniques and extract detection patterns
• Write and refine PCRE-based detection signatures for our scanning engine precision matters, false positives erode customer trust
• Maintain processing SLAs as part of a globally distributed team providing round-the-clock malware coverage
• Research emerging threats new CMS exploitation techniques, supply-chain attacks on plugins/themes, zero-day delivery methods

Requisitos

• Strong PCRE regex expertise, you understand anchors, non-capturing groups, performance implications, and can write complex patterns that are both accurate and efficient
• 3+ years working with PHP and/or JavaScript, reading, understanding, and analyzing code (differentiate legitimate and malicious artifacts, no software engineering skills required)
• Web malware reverse engineering, JS deobfuscation, PHP deobfuscation, unpacking encoded payloads
• Understanding of web attack injection, XSS, RCE, file upload exploits, and how they manifest in hosting environments
• Familiarity with web server and shared hosting architecture, Apache/Nginx/LiteSpeed, Reverse Proxy, PHP handlers, WAF, Namespaces, cgroups, Linux File system permissions
• English proficiency at upper-intermediate level or above

Diferenciais

• If you bring strong analytical skills and a genuine curiosity about how malware works, but your background is in security research or adjacent fields rather than pure malware analysis, we want to hear from you.

Benefícios

• Work Schedule We operate a 24/7 malware processing pipeline with a 1-hour SLA.
• To make that sustainable and fair: You'll work a standard 5-day week (5 on / 2 off) on a fixed schedule aligned with your time zone and preferences — no mandatory rotation
• Weekends and public holidays that fall within your schedule are compensated with either bonus payments or an extra vacation days

Carga horária

5 dias na semana (5 dias trabalhando / 2 dias de folga) no horário fixo de acordo com sua zona de tempo e preferências

Sobre a empresa

Imunify360 scanners clean millions of infected files and websites every month.

Behind this number is a team of malware analysts who reverse-engineer threats, write detection signatures, and build the intelligence layer that protects hundreds of thousands of web servers from small WordPress sites to infrastructure giants.

Benefícios

• Compensação de finais de semana e feriados com pagamentos extras ou dias de férias adicionais