Quick Summary
Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious Determine the underlying intent and goal behind each prompt,
Minimum of 5 years of proven, hands-on experience in Windows malware analysis and research Strong command of Windows internals and the Win32/NT API, including process injection, persistence,
On behalf of SafetyTech Client #1, SD Solutions is looking for a highly motivated and technically proficient Windows Malware Researcher to join our security research division.
SD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer.
This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on Windows malware research.
You need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems.
Responsibilities
~1 min read- →Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious
- →Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm
- →Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker
- →Annotate each prompt with an intent label and a clear written rationale, following the project guidelines
- →Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer
- →Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them
Requirements
~1 min read- Minimum of 5 years of proven, hands-on experience in Windows malware analysis and research
- Strong command of Windows internals and the Win32/NT API, including process injection, persistence, privilege escalation, and EDR/AV evasion techniques
- Static and dynamic analysis of PE files, including unpacking, deobfuscation, and sandbox and debugger use (x64dbg, IDA, Ghidra)
- Experience with major malware families and categories: loaders, infostealers, RATs, ransomware, and C2 frameworks
- Ability to write YARA rules and extract IOCs and TTPs mapped to MITRE ATT&CK
- Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation
- Clear written communication in English, with the ability to document your reasoning concisely
Nice to Have
~1 min read- GIAC GREM, eCMAP, GIAC GCFA
- Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.
A company building specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment. Currently expanding a freelance contributor pool for scenario and environment development.
By applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice, and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.
Location & Eligibility
About this job
- Who can apply
- Poland
- Posted
- Today
Listing Details
- First seen
- October 22, 2026
- Last seen
- October 22, 2026
Posting Health
- Days active
- 0
- Repost count
- 1
- Trust Level
- 52%
- Scored at
- October 22, 2026
Signal breakdown
Similar Other jobs
View all →Stay ahead of the market
Get the latest job openings, salary trends, and hiring insights delivered to your inbox every week.
No spam. Unsubscribe at any time.
