{"id":3104719,"url":"https://alion.io/job/sd-solutions-safetytech-client-1-windows-malware-researcher","title":"SafetyTech Client #1 | Windows Malware Researcher","company":{"id":4418535,"name":"SD Solutions","domain":"sdsolutions.tech","url":"https://alion.io/company/sdsolutions-3","size_band":"51-200","is_staffing_agency":true,"employer_type":"agency","is_intermediary":false,"listed_via":null,"ats_vendor":"Breezy","truth_index":null},"role":"AI/ML","role_family":"AI/ML","seniority":"senior","employment_type":"full_time","work_mode":"remote","remote_scope":"stated_countries","remote_scope_basis":"board_field","remote_working_hours":null,"hiring_geo_confidence":"structured","locations":[],"countries":[],"hiring_countries":["PL"],"hiring_countries_total":1,"salary":null,"salary_estimate":{"min_usd":61000,"max_usd":104000,"period":"year","method":"role_seniority_country_remote_cell","sample_n":46},"experience_years_min":5,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"Ghidra","optional":false},{"name":"MITRE ATT&CK","optional":false},{"name":"Windows","optional":false},{"name":"x64dbg","optional":false},{"name":"YARA","optional":false},{"name":"YARA","optional":false},{"name":"Assembly","optional":true}],"status":"live","first_seen_at":"2026-10-22T18:27:03Z","employer_posted_date":"2026-10-22","last_verified_at":"2026-10-27T06:37:54Z","board_verified":true,"closed_at":null,"days_open":4,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":4},"description":"On behalf of SafetyTech Client #1, SD Solutions is looking for a highly motivated and technically proficient Windows Malware Researcher to join our security research division.\nSD Solutions is a staffing company operating globally. Contact us to get more details about the benefits we offer.\nThis role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on Windows malware research.\nYou need to be independent, attentive to details, organized, eager to learn new things, and eager to research and solve complex problems.\nResponsibilities:\nReview cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious\nDetermine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm\nApply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker\nAnnotate each prompt with an intent label and a clear written rationale, following the project guidelines\nIndependently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer\nFlag ambiguous cases, emerging attack techniques, and gaps in the guidelines, and help improve them\nRequirements:\nMinimum of 5 years of proven, hands-on experience in Windows malware analysis and research\nStrong command of Windows internals and the Win32/NT API, including process injection, persistence, privilege escalation, and EDR/AV evasion techniques\nStatic and dynamic analysis of PE files, including unpacking, deobfuscation, and sandbox and debugger use (x64dbg, IDA, Ghidra)\nExperience with major malware families and categories: loaders, infostealers, RATs, ransomware, and C2 frameworks\nAbility to write YARA rules and extract IOCs and TTPs mapped to MITRE ATT&CK\nStrong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation\nClear written communication in English, with the ability to document your reasoning concisely\nNice to have:\nGIAC GREM, eCMAP, GIAC GCFA\nDemonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.\nAbout the company:\nA company building specialized evaluation infrastructure for AI safety and robustness testing. Their platform simulates adversarial conditions used by AI development teams to validate agent behavior before deployment. Currently expanding a freelance contributor pool for scenario and environment development.\nBy applying for this position, you agree to the terms outlined in our Privacy Policy. Please take a moment to review our Privacy Policy https://sd-solutions.breezy.hr/privacy-notice, and make sure you understand its contents. If you have any questions or concerns regarding our Privacy Policy, please feel free to contact us.","description_format":"text","description_chars":3101,"description_truncated":false,"requirements":{"experience_years_min":5,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[{"language":"English","level":"Upper-Intermediate (B2)","optional":false}]},"benefits":[],"hiring_locations":[{"name":"Poland","iso":"PL","kind":"country"}],"hiring_excludes":[],"relocation_offered":false,"industries":["Threat Intelligence"],"lifecycle":[{"event":"open","at":"2026-10-22T18:42:18Z"}],"visa":[],"liveness":{"score":51,"band":"ok","label":"Likely open","p_open":1,"p_active":0.542,"p_room":0.945,"age_days":4,"expected_fill_days":11,"reasons":["conf:3","agency","velocity","win:mid"],"computed_at":"2026-10-27T05:46:45Z"},"pay":null,"html_url":"https://alion.io/job/sd-solutions-safetytech-client-1-windows-malware-researcher","json_url":"https://alion.io/job/sd-solutions-safetytech-client-1-windows-malware-researcher.json","meta":{"generated_at":"2026-10-27T07:37:35Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":8153,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-28T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":4418535},"rest":"https://alion.io/mcp/rest/get_company?id=4418535"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fsd-solutions-safetytech-client-1-windows-malware-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fsd-solutions-safetytech-client-1-windows-malware-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fsd-solutions-safetytech-client-1-windows-malware-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/sd-solutions-safetytech-client-1-windows-malware-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fsd-solutions-safetytech-client-1-windows-malware-researcher"}]}