Malware Researcher

At JFrog, we’re reinventing DevSecOps to help the world’s greatest companies innovate. Our team of industry-leading software security experts are true pioneers, constantly pushing the boundaries with original research and technological innovation. JFrog is a special place with a unique combination of brilliance, spirit and just all-around great people. Thousands of customers, including the majority of the Fortune 100, trust JFrog to manage, accelerate, and secure their software delivery from code to production – a concept we call “liquid software”. Wouldn't it be amazing if you could join us on our journey?

JFrog Security is one of the main pillars of the JFrog offering and long-term strategy. We are pushing the boundaries of security analysis of both binaries and code, shifting left and bringing new and exciting features to both developers and DevOps. We are looking for an experienced malware researcher to join the team. As a Malware Researcher at JFrog, you will perform research on source code, compiled code, and various software supply chain attacks. The position requires proven experience in security nomenclature and an understanding of both high-level and low-level attacks.

You’re welcome to examine the products of the research team’s work at https://research.jfrog.com.

As a Malware Researcher at JFrog you will... 

• Research malicious code in public repositories from various coding languages and technologies.
• Research malicious AI assets such as models, skills and plugins.
• Define and implement ways to automatically detect malicious code in open-source software.
• Write technical reports and outward-facing publications regarding all research subjects mentioned above.

To be a Malware Researcher at JFrog you need...

• 3+ years of malware research experience in any of the following languages: Native code (C, C++), .NET (C# etc), Python, Node.JS, Java, Go
• Experience in writing technical reports
• Programming experience in Python
• Advantage – Experience in security research or analysis of AI assets - ML models, skills, and plugins.
• Advantage – Binary reverse engineering experience