Director, Engineering (Malware Research)

• Build, lead, and mentor a high-caliber malware research team from the ground up.
• Define the strategic roadmap for the team, aligning research initiatives with business and security objectives.
• Develop a world-class malware research lab with advanced tools and methodologies.
• Foster relationships with external cybersecurity researchers, vendors, and organizations to enhance threat intelligence capabilities.
• Advocate for security research internally and externally through whitepapers, industry conferences, and strategic partnerships.

• Design and implement a secure malware analysis lab environment.
• Conduct advanced research on malware, including reverse engineering, static and dynamic analysis, and behavioral analysis.
• Identify, document, and analyze Indicators of Compromise (IOCs), MITRE TTPs, and Indicators of Attacks (IOAs) for the latest threats.
• Provide in-depth insights into ransomware and its impact on data, cloud infrastructure (AWS, Azure, GCP), and SaaS applications (M365, Google Workspace, etc.).
• Develop innovative detection and mitigation strategies to counteract evolving malware threats.
• Stay at the forefront of emerging cyber threats, attack techniques, and industry trends.

• Work closely with Product Managers to align research efforts with customer needs and security product development.
• Partner with engineering and security teams to integrate research findings into detection mechanisms, threat models, and security products.
• Contribute to thought leadership by publishing research papers, blogs, and technical reports.
• Present research findings to internal stakeholders, executive teams, and industry forums.
• Collaborate with marketing teams to communicate research-driven insights for external publications and cybersecurity awareness campaigns.

• 12 - 15 + years of experience in malware analysis, threat research, and cybersecurity, with at least 3+ years in a leadership role.
• Proven expertise in reverse engineering, static and dynamic analysis, and sandboxing environments.
• Strong understanding of malware behavior, the cyber kill chain, incident response, and forensic data collection.
• Hands-on experience with cloud security (AWS, Azure, GCP), Linux security, M365 API security, firewalls, IDS/IPS, SIEM, and threat intelligence.
• At least one or more security certifications (e.g., OSCP, GIAC, SANS, CISSP, CISM, or equivalent).
• Excellent communication, leadership, and strategic thinking skills.
• Strong problem-solving abilities and an analytical mindset to tackle complex security challenges.
• Ability to work in a fast-paced environment, manage multiple projects, and prioritize effectively.
• Established industry network and experience in talent acquisition for security research teams.

• Experience in developing machine learning-based malware detection techniques.
• Knowledge of cyber threat hunting and advanced persistent threat (APT) tactics.
• Experience working with law enforcement, government agencies, or cybercrime investigation units.
• Hands-on experience with exploit development, fuzzing, or penetration testing.

• Lead and shape a cutting-edge malware research team from the ground up.
• Work on high-impact cybersecurity challenges in an innovative and collaborative environment.
• Influence product security strategies and contribute to industry-leading research.
• Competitive compensation, growth opportunities, and a dynamic company culture.

Druva