Malware Researcher - Threat Research

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.
 
At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.
 
AI Fearlessly.

TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk.

At TrendAI™, we’re always seeking exceptional talent: people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.

AI Fearlessly.

As a Malware Researcher, you will be part of a team that analyzes advanced malware samples using static and dynamic analysis with the primary goal of decoding and detecting malware communication mechanisms. You will also be using AI-based solutions to support and accelerate your analysis of malware threats. You will be providing various detection solutions based on the detailed analysis of the malware.

Work Location: Ontario, Canada | Remote

• →Reverse-engineer malware samples to identify malware communication mechanisms and analyze malware network traffic to develop Snort signatures.
• →Produce documentation describing malware behaviour and detection strategies.
• →Communicate research results to customers, team members, and management.
• →Collaborate with team members to improve the analysis and response process.
• →Monitor security industry publications, newsgroups and press releases to identify new or active malware threats.

• Advanced knowledge in reverse engineering on various architectures and platforms.
• Familiarity with debugging tools such as IDA Pro, Ghidra, WinDbg, x64dbg etc.
• In-depth knowledge of modern operating systems including Windows and Linux.
• Knowledge of various encryption and obfuscation techniques used by malware.
• Experience of low level programming languages such as Assembly and/or C/C++ is a plus.
• In-depth knowledge of TCP/IP and other networking protocols. RFC-level understanding of popular protocols like HTTP/FTP/SMTP/SMB.
• Familiarity with tools such as Snort, Wireshark, Windows Sysinternals and VMware.
• Experience or familiarity with Mitre ATT&CK Framework, Stix 2.x format for Cyber Threat Intelligence (CTI) and YARA rules.
• Familiarity with scripting languages such as Python, Ruby, Perl, JavaScript, PowerShell or Bash.
• Experience with AI agentic environments, MCP and harness engineering, efficient use of different AI models, and effective prompt writing.
• Ability to analyze and describe complex application behaviours.
• Experience of reverse engineering is a plus.
• Proficient English communication skills, both written and oral.
• Great attention to details and personal QA.
• Team player, having problem-solving skills, and self-starter with the ability to work with minimal supervision.

Expected base salary range: $106,000 – $145,000 per year (CAD)

Bonus/incentive eligibility: Eligible for the company-wide performance bonus

Final pay within this range depends on job-related factors such as experience, skills, and certifications.