{"id":1252880,"url":"https://alion.io/job/people-gamut-security-engineer-malware-analysis","title":"Security Engineer - Malware Analysis","company":{"id":3806713,"name":"People Gamuthr Solutions","domain":"peoplegamuthrsolutions958.turbifysites.com","url":"https://alion.io/company/turbifysites","size_band":null,"is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":null,"truth_index":null},"role":"Security","role_family":"Security","seniority":"middle","employment_type":null,"work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Bengaluru, India"],"countries":["IN"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":15000,"max_usd":36000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":714},"experience_years_min":3,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Go","optional":false},{"name":"JavaScript","optional":false},{"name":"Maven","optional":false},{"name":"npm","optional":false},{"name":"Python","optional":false},{"name":"TypeScript","optional":false},{"name":"CVE","optional":true},{"name":"Java","optional":true},{"name":"SLSA","optional":true},{"name":"YARA","optional":true},{"name":"YARA","optional":true}],"status":"live","first_seen_at":"2026-09-11T12:19:21Z","employer_posted_date":null,"last_verified_at":"2026-09-11T12:19:21Z","board_verified":false,"closed_at":null,"days_open":35,"trust":{"level":"not_scored","repost_count":null,"flags":[],"days_open":35},"description":"What you'll do :\n\n- The primary tasks of this position relate to the detection, triage, and analysis of malicious open source software components - identifying threats across public package ecosystems (npm, PyPI, Maven, etc.) and assessing their scope, intent, and impact.\n\n- Day-to-day work includes triaging and assessing incoming malware alerts, reviewing Indicators of Compromise (IoCs), and maintaining threat campaign records to track attacker infrastructure, tactics, and patterns over time.\n\n- A core responsibility is the in-depth technical analysis of suspicious packages: reverse-engineering obfuscated code, identifying malicious behaviors (exfiltration, backdoors, dependency confusion, typosquatting, etc.), and producing detailed internal assessments.\n\n- You will author and publish external-facing content - blog posts, technical write-ups, and security advisories - communicating findings clearly to both technical and non-technical audiences, and contributing to the broader security community's awareness of emerging threats.\n\n- You will collaborate with internal teams to feed findings into detection pipelines, enrich our vulnerability and threat database, and help improve automated detection coverage over time.\n\nWhat we're looking for :\n\n- Bachelor's degree in engineering or a related field, with at least 3 years of hands-on professional experience specifically in malware analysis, threat intelligence, or open source package security.\n\n- Demonstrated experience triaging security alerts at scale and working within or alongside a SOC or threat intelligence team.\n\n- Hands-on experience reviewing and interpreting IoCs (file hashes, domains, IPs, behavioral signatures) and maintaining threat campaign tracking.\n\n- Proficiency in reading and analyzing code across multiple languages (Python, JavaScript/TypeScript, Java, Go) - including obfuscated or minified code.\n\n- Experience producing external security communications: blog posts, advisories, or technical reports intended for a public or customer-facing audience.\n\n- Understanding of package manager ecosystems and common attack patterns (typosquatting, dependency confusion, malicious install scripts, etc.).\n\nNice to have :\n\n- Experience contributing to or operating threat intelligence platforms or malware databases.\n\n- Familiarity with static and dynamic analysis tooling (sandboxes, YARA rules, SAST tools).\n\n- Understanding of software supply chain security standards and frameworks (SLSA, SSDF, etc.).\n\n- Prior public research, CVE credits, or published malware findings.\n\n- Security certifications such as GREM (GIAC Reverse Engineering Malware) or equivalent.\n\nSkills\nMalware, Python, Java, Golang, Security, Ethical Hacking, Cyber Security, Information Security, SAST, Threat Detection","description_format":"text","description_chars":2779,"description_truncated":false,"requirements":{"experience_years_min":3,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Incident Response"],"lifecycle":[{"event":"open","at":"2026-09-25T18:04:06Z"}],"visa":[],"liveness":{"score":14,"band":"cold","label":"Long shot","p_open":0.6,"p_active":0.533,"p_room":0.45,"age_days":34,"expected_fill_days":20,"reasons":["seen:34","win:tail"],"computed_at":"2026-10-16T05:45:00Z"},"pay":null,"html_url":"https://alion.io/job/people-gamut-security-engineer-malware-analysis","json_url":"https://alion.io/job/people-gamut-security-engineer-malware-analysis.json","meta":{"generated_at":"2026-10-16T12:34:58Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":11858,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-17T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":3806713},"rest":"https://alion.io/mcp/rest/get_company?id=3806713"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fpeople-gamut-security-engineer-malware-analysis"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fpeople-gamut-security-engineer-malware-analysis"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fpeople-gamut-security-engineer-malware-analysis"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/people-gamut-security-engineer-malware-analysis\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fpeople-gamut-security-engineer-malware-analysis"}]}