Senior Detection Engineer

Job not on LinkedIn

🔥 3 minutes ago

🇪🇺 Europe – Remote

💵 €70k - €110k / year

⏰ Full Time

🟠 Senior

👷🏻‍♀️ Engineer

👻 Ghost score 0%

What it means: the chance that no one is really hiring for this job.How to read it: 60% or higher means we think this is a ghost. Lower scores are less of a worry.How we score it: age, reposts, open roles vs team size, how fast jobs close, and whether pay is listed.Fine print: an estimate from public data, not a judgment of the company. Real jobs can score high, so treat it as a hint, not a fact.

Apply Now

Find Similar Remote Jobs

MXTools / Spamhaus

WebsiteLinkedInAll Job Openings

- employees

🔒 Cybersecurity

☁️ SaaS

🤝 B2B

Cybersecurity • SaaS • B2B

MXTools / Spamhaus is presented in the provided material as a provider of real-time email and network abuse defenses (the content appears to describe Abusix’s offerings). It operates real-time blocklists and threat intelligence feeds to block email-borne threats such as spam, phishing, ransomware, and malware, and provides an automated network abuse management platform that ingests, correlates, and resolves abuse reports. Key products described include Abusix Mail (DNSBL-based email filtering), Abusix Ops (automated abuse desk and incident resolution), and Abusix Intel (threat intelligence from a global sensor, spam trap, and honeypot network). Customers are primarily telecommunications companies, ISPs, hosting/cloud providers, and large enterprises; the company emphasizes low false-positive rates, rapid reputation updates, and proprietary data (e. g. , Blackhole. mx and XARF standards).

📋 Description

• Write, test, and maintain high-fidelity detection rules such as YARA with low false-positive rates • Optimize detection rules for scalable deployment across continuous detection and retrohunt pipelines • Own detection rule-set quality, including rule verification, false-positive risk assessment, and performance testing • Reverse engineer Windows and Linux malware, including emerging families, packers, and obfuscated payloads • Identify opportunities for detection and intelligence extraction • Develop and maintain malware configuration extractors and parsers • Recover command-and-control infrastructure, campaign identifiers, and other intelligence from files • Work with developers to improve the in-house sandbox’s detection capabilities • Ensure proper output when detonating modern threats • Supervise and review interns or junior team members, set priorities, and provide feedback • Share findings with the wider security community when appropriate • Work with marketing to produce content and present at appropriate events

🎯 Requirements

• 5+ years of professional experience in Malware Analysis, Reverse Engineering or Detection Engineering • Expert-level experience writing detections using YARA and Suricata, including performance tuning, false-positive management and testing against large sample sets • Ability to build malware configuration extractors in Python, including handling common encryption and obfuscation schemes • Hands-on experience with malware sandboxes such as CAPE • Understanding of how sandbox output feeds detection and extraction workflows • Strong reverse engineering skills using disassemblers, decompilers and debuggers • Knowledge of packers and common obfuscation methods • Knowledge of Windows and Linux OS internals • Knowledge of network protocols commonly used by malware families • Proficiency in Python • Familiarity with Assembly (x86/x64), C and at least one of Go or Rust • Ability to set research priorities and recommend direction based on client and product focus • Ability to guide a less experienced colleague • Strong written and verbal communication in English • Experience with sandbox development or sandbox internals, including hardening and anti-evasion techniques (preferred) • Drakvuf experience (ideal but not critical) • Familiarity with large-scale YARA scanning and retrohunt platforms such as VirusTotal and Censys (preferred) • Public track record of research, rules, or tooling, such as conference talks, blogs, or open-source contributions (preferred)

🏖️ Benefits

• Competitive salary • Excellent annual leave allowance • Opportunity to work in a dynamic and supportive environment • Flexible working hours • Remote work setup • Global travel approximately three times a year for face-to-face meetings and event attendance

📊 Check your resume score for this job

Improve your chances of getting an interview by checking your resume score before you apply.

Upload Resume