Malware Intelligence Analyst

This position is posted by Jobgether on behalf of a partner company.

We are currently looking for a Malware Intelligence Analyst in France.

This is an exciting opportunity to join a globally distributed cybersecurity team protecting hundreds of thousands of web servers from evolving online threats.

As a Malware Intelligence Analyst, you will reverse-engineer real-world web malware, uncover attacker techniques, and transform your findings into high-precision detection signatures.

Your work will directly contribute to safeguarding websites ranging from small CMS deployments to large-scale infrastructure environments.

Operating within a 24/7 malware processing pipeline, you’ll collaborate across time zones to ensure rapid threat response and continuous coverage.

This fully remote role offers a fixed schedule aligned with your time zone, empowering you to deliver meaningful impact while maintaining balance.

If you are passionate about dissecting malicious code and strengthening web security at scale, this role offers both challenge and purpose.

• Accountabilities
• Analyze, classify, and prioritize web-based malware threats, including obfuscated PHP backdoors, Java Script injections, SEO spam, redirectors, and cryptominers targeting hosting environments.
• Reverse-engineer malicious PHP and Java Script code to uncover attacker techniques and extract reliable detection patterns.
• Develop, test, and refine high-precision PCRE-based detection signatures for production scanning engines, minimizing false positives while maximizing coverage.
• Maintain strict service-level agreements (SLAs) as part of a globally distributed team providing continuous 24/7 malware coverage.
• Research emerging attack vectors such as CMS exploitation techniques, plugin/theme supply-chain compromises, and zero-day delivery methods.
• Contribute to improving internal processes, tooling, and automation to enhance detection efficiency and scalability.

Requirements

• Strong expertise in PCRE regex, including advanced constructs, performance optimization, and accurate pattern design.
• Minimum 3 years of experience working with PHP and/or Java Script, with the ability to read, analyze, and differentiate between legitimate and malicious code.
• Hands-on experience with web malware reverse engineering, deobfuscation techniques, and payload unpacking.
• Solid understanding of common web attack vectors (e. g., injection attacks, XSS, RCE, file upload exploits) and their behavior in hosting environments.
• Familiarity with web server architectures and shared hosting ecosystems (Apache, Nginx, Lite Speed, reverse proxies, PHP handlers, WAFs, Linux file systems, namespaces, cgroups).
• Upper-intermediate or higher English proficiency.
• Additional assets include experience with Word Press internals, website incident response, penetration testing, Python scripting, YARA rules, or hosting control panels (c Panel, Plesk, Direct Admin).
• Strong analytical thinking, curiosity about attacker methodologies, and the ability to work independently in a remote environment.

Benefits

• Fully remote position with a fixed 5-day workweek (5 on / 2 off) aligned with your time zone — no mandatory rotation.
• 24 paid vacation days annually, plus 10 national holidays and unlimited sick leave.
• Additional compensation or extra vacation days for weekends and public holidays worked within your schedule.
• Private medical insurance compensation.
• Co-working space and gym/sports reimbursement.
• Performance-based recognition, including rewards for innovative ideas eligible for patenting.
• Structured onboarding and modern tooling to support continuous professional growth.
• #J-18808-Ljbffr