Malware Researcher

JFrog Security is one of the main pillars of the JFrog offering and long-term strategy. We are pushing the boundaries of security analysis of both binaries and code, shifting left and bringing new and exciting features to both developers and DevOps. We are looking for an experienced malware researcher to join the team. As a Malware Researcher at JFrog, you will perform research on source code, compiled code, and various software supply chain attacks. The position requires proven experience in security nomenclature and an understanding of both high-level and low-level attacks.

You’re welcome to examine the products of the research team’s work at https://research.jfrog.com.

• Research malicious code in public repositories from various coding languages and technologies.
• Research malicious AI assets such as models, skills and plugins.
• Define and implement ways to automatically detect malicious code in open-source software.
• Write technical reports and outward-facing publications regarding all research subjects mentioned above.

• 3+ years of malware research experience in any of the following languages: Native code (C, C++), .NET (C# etc), Python, Node.JS, Java, Go
• Experience in writing technical reports
• Programming experience in Python
• Advantage – Experience in security research or analysis of AI assets - ML models, skills, and plugins.
• Advantage – Binary reverse engineering experience