Threat Analysis Engineer

Who Are We?  
We’re not just a company; we’re a global force. Fiercely committed to ensuring that everyone, everywhere, can live their lives digitally safe. Our family of brands – Norton, Avast, LifeLock, Avira, AVG, ReputationDefender and CCleaner – unite the brightest minds, the sharpest tech, and the most diverse thinking to protect over 500 million people. And we’ve built an inclusive workplace, where your well-being is a priority because true success comes from a place of balance and authenticity. When you're thriving, you’re unstoppable. So, bring us your bold ideas and passion that refuses to quit. The digital world isn’t some distant reality – it's the world we live in, and we’re ready for it. If you’re ready to push boundaries and be part of something bigger, join #TeamGen.

How We Work? 
We love to work together and collaborate in our teams, which is why we opted for a hybrid model, allowing us to work from the office 2-3 times per week. 

Mission and Goals:

We are seeking a Threat Analysis Engineer who will play a crucial role in identifying, analyzing, and mitigating emerging scams and cyber threats to safeguard our customers' digital assets. Your responsibilities will include researching and analyzing various types of scams and scamming techniques to contribute to the continuous evolution of our anti-scam detection strategy and innovation to establish leadership in the market. You will also focus on analyzing and reverse engineering various types of cyberthreats to understand their behavior, propagation methods and potential impact on our customers' systems to implement detection mechanisms, ensuring the highest level of protection efficacy for our customers.

In the Threat Analysis team we are responsible to uphold our commitment to customer protection against threats delivered via various infection vectors, including PE and non-PE file formats (such as scripts, Office and PDF documents), as well as zero-day software vulnerabilities and exploits used to deliver malware. Detecting these types of threats is essential for maintaining overall protection efficacy across all our products and advancing our anti-scam detection strategy and innovation to remain a market leader. 

As part of the Threat Analysis team you will also handle threat hunting, analysis, classification and creation of detection patterns for multiple threats. Building the threat landscape while hunting is necessary to ensure the protection against new and evolving threats. 

We are responsible for understanding our protection mechanisms and capabilities, identify gaps and enhance our machine learning accuracy against threats. 

Objectives:

• Conduct in-depth analysis of scam threats including phishing, social engineering and other fraudulent activities

• Analysis of malware samples to identify their functionalities and potential attack vectors

• Stay updated on the latest scam and malware trends, tactics and techniques used by scammers and threat actors to ensure proactive detection and response

• Threat hunting, analysis, classification and creation of detection patterns for multiple threats (such as scripts, Office and PDF documents), essential for maintaining the protection efficacy of our customers against the evolving online threats landscape          

• Conducting research and analysis of ongoing scam campaigns and developing prototypes to enhance scam protection mechanisms 

• Investigating software vulnerabilities, hunting for exploits leveraging those vulnerabilities and creating protection in Gen products

• Develop and maintain tools, scripts and automated processes to streamline analysis and detection workflows

• Monitor the correct function of our automatic processes, or find potential ways to improve them

• Write technical blog articles related to malware analysis, vulnerabilities, cybersecurity trends and best practices to educate and inform both technical and non-technical audiences 

Competencies:

• Bachelor's degree in Computer Science, Information Security or related field and the drive to expand your horizons every day

• 3+ yrs of relevant experience.

• Proven experience in malware analysis, reverse engineering and threat analysis and reporting

• Proficiency in using malware analysis tools such as IDA Pro, Ghidra, debuggers as well as programming and scripting language knowledge, particularly Python

• Strong understanding of Windows internals, file formats, network protocols and assembly language

• Proficiency in creating database queries and working with data visualization and analytics tools such as Power BI, Kibana, and similar software is required.

• Excellent analytical and problem-solving skills with a keen attention to details

• Ability to work independently and collaboratively

• Effective communication skills, both written and verbal, with the ability to convey complex technical concepts

Gen is proud to be an equal-opportunity employer. We celebrate diversity and are committed to creating an inclusive and accessible environment for all employees. All employment decisions are based on merit, experience, and business needs, without regard to race, color, national origin, age, religion, sex, pregnancy (including childbirth or related medical conditions), genetic information, disability (physical or mental), medical condition, marital status, sexual orientation, gender identity or gender expression, military or veteran status, or any other consideration made unlawful by federal, state, or local law. Gen strictly prohibits unlawful discrimination based on such protected characteristics and seeks to recruit the most talented candidates from diverse cultures and backgrounds. 

We also consider employment-qualified individuals with arrest and conviction records. In addition, we will not discharge or in any other manner discriminate against employees or applicants because they have inquired about, discussed, or disclosed their own pay or the pay of another employee or applicant. Learn more about pay transparency. 

Gen complies with all anti-discrimination laws. 

To conform to U.S. export control regulations, applicant should be eligible for any required authorizations from the U.S. Government.