Linux Threat Researcher focusing on implementing behavior-based detection and threat research. Join Sophos in defending against Linux-targeted cyber threats.
Responsibilities
Implementing context-aware & behavior-based detection to provide multiple layers of protection from attacks targeting Linux infrastructure
Mapping protection & detection of attack behaviors to MITRE ATT&CK framework
Linux kernel exploit research and detection
Threat hunting, data mining, and using other methods of research to discover new threats to Linux and opportunities to improve protection
Working with product teams to adapt protection technology to the rapidly evolving threat landscape
Reverse engineering and debugging malware, understanding the complete end-to-end kill chain, from attack vector to persistent payload
Publish research articles and whitepapers on the corporate blog
Requirements
Deep knowledge of Linux operating system, internals and APIs
Experience in computer security and/or threat research
Dynamic and static malware analysis experience
Programming experience
Threat hunting
Data mining
Reverse engineering skills
Knowledge of exploitation techniques
Knowledge of offensive tools and techniques
Benefits
Sophos operates a remote-first working model, making remote work the primary option for most employees. However, some roles may necessitate a hybrid approach.
Our people – we innovate and create, all of which are accompanied by a great sense of fun and team spirit
Employee-led diversity and inclusion networks that build community and provide education and advocacy
Annual charity and fundraising initiatives and volunteer days for employees to support local communities
Global employee sustainability initiatives to reduce our environmental footprint
Global fitness and trivia competitions to keep our bodies and minds sharp
Global wellbeing days for employees to relax and recharge
Monthly wellbeing webinars and training to support employee health and wellbeing
Software Developer/Analyst scaling Tangam Systems’ casino analytics platforms with C#, .NET, data pipelines, and cloud infrastructure. Building automated tools, dashboards, and full - stack applications.
Ingénieur logiciel principal développant des applications Web, API et intégrations assistées par l’IA chez EDC. Contribution aux plateformes numériques aidant les entreprises canadiennes à réussir à l’étranger.
Senior full - stack developer building AI - enabled enterprise platforms for Export Development Canada. Designing web applications, APIs, integrations, and cloud - native delivery systems.
Staff Software Engineer owning architecture, modernization, and production delivery for Tag Software Group’s enterprise software platform. Leading a lean engineering team across cloud and on - premises environments.
Software Development Engineer in Test automating testing, deployment, and validation for Akamai’s distributed cloud and edge platform. Building Python - based frameworks for scalable virtualized servers.
Senior backend engineer building AI - assisted analyzers, dependency scanning, and remediation tools for GitLab’s DevSecOps platform. Improving code security across ecosystems, CI workflows, and AI agent tooling.
Software Developer Co - op writing production code and developing features for Magnet Forensics’ digital investigative software. Debugging and collaborating within the engineering team.
Senior Linux systems specialist supporting client infrastructure for a Linux, Open Source, DevOps, and Kubernetes consultancy. Managing alerts, patching, deployments, cloud systems, and infrastructure roadmaps remotely.
Senior Linux systems specialist supporting client infrastructure for Crafty Penguins, a Canadian Linux, Open Source, DevOps, and Kubernetes consultancy. Managing systems, cloud, containers, networking, patching, and deployments remotely.