Malware Analysis Researcher

Description

C3iHub, IIT Kanpur is seeking a highly motivated and skilled Malware Analysis Researcher to join our cybersecurity research team. The ideal candidate will possess a strong foundation in static and dynamic malware analysis, with hands-on experience in reverse engineering, automation, and machine learning-based malware detection. You will work on analyzing real-world malware samples, building automation pipelines, curating datasets, and developing innovative solutions to detect and mitigate emerging threats. This role also involves publishing research articles and collaborating on advanced detection frameworks.

Responsibilities

Key Responsibilities:

• Perform static and dynamic analysis of malware samples across formats (PE, PDF, ELF, APK).

• Automate analysis tasks using Python, Bash, or other scripting tools.

• Set up and maintain sandbox environments (e.g., Cuckoo Sandbox) for behavior monitoring.

• Analyze packed, encrypted, or obfuscated malware using reverse engineering techniques.

• Utilize and contribute to open-source tools (e.g., YARA, Volatility, Ghidra, Radare2).

• Curate and label malware datasets for use in machine learning pipelines.

• Conduct source code analysis using SAST and DAST tools.

• Author technical documentation and publish research articles in the field.

• Collaborate with internal teams on threat research, detection model tuning, and PoC development.

• Travel (within India) occasionally for project-related meetings, demonstrations, or coordination.

Eligibility

Required Qualifications

• Master’s degree in Computer Science, Information Security, or related field

• 1–2 years of hands-on experience in malware analysis or reverse engineering

• Proficiency in scripting (e.g., Python, Bash) and familiarity with threat analysis tools

• Strong understanding of malware behavior, file formats, and analysis techniques.

Preferred Qualifications

• Specialization in Cybersecurity or Information Security.

• Experience with tools such as IDA Pro, Ghidra, Wireshark, or Sysmon.

• Exposure to ML/AI-based malware classification projects.

• Research publications in reputable cybersecurity journals or conferences.

Travel

As and when required, across the country for project execution and monitoring as well as for coordination with geographically distributed teams

Communication

• Submit a cover letter summarising your experience in relevant technologies and software along with a resume and the Latest passport-size photograph.