Lookout Inc is hiring a Sr. Staff Security Researcher to join our Threat Intelligence team. You will be at the forefront of identifying, investigating, and tracking targeted attacks against mobile device users globally. Your work will leverage a unique dataset of 200M+ Android and iOS apps to research mobile malware and hunt malicious actors.
What You’ll Do
- Independently identify, analyze, and track advanced nation-state and financially motivated threat actors and their TTPs.
- Drive the development of strategies to hunt mobile threats targeting enterprises and individuals.
- Reverse-engineer and analyze the capabilities of mobile malware.
- Investigate adversary command-and-control and phishing infrastructure.
- Conduct independent research and report findings to Threat Intelligence customers.
- Mine internal and external data sources to identify new campaigns, malware families, and malicious actors.
- Devise and implement new detection logic and develop innovative ways to expand and finetune coverage.
- Prepare and deliver public media reports and present findings at conferences and customer events.
- Serve as a key technical leader for customer, prospect, and partner engagement activities.
What We’re Looking For
- Proven experience in threat hunting across multiple datasets and with security tools such as VirusTotal, Validin, and Shodan.
- Experience leveraging big data technologies such as Lucene, ElasticSearch, and AWS Athena.
- Demonstrated ability in reverse engineering software.
- Ability to articulate technical findings clearly in both written reports and presentations.
- Hands-on experience with tools like JEB, IDA Pro, Ghidra, Hopper, Frida, Wireshark, and DirBuster.
- Ability to read code in Java and C.
- Experience conducting OSINT investigations.
- Ability to create research tools in Python.
- Familiarity with threat intelligence frameworks and terminology including MITRE ATT&CK, STIX, YARA, MISP, OpenCTI, and the Intelligence Cycle.
- Interest in geopolitical dynamics and the ability to apply that context to inform intelligence analysis.
- Curiosity and a strong drive to understand how both state and criminal actors operate.
Nice to Have
- Mobile app reversing experience.
- Ability to read ARM Assembly, ObjectiveC, and Swift.
Technical Stack
- Languages: Python, Java, C
- Reversing Tools: JEB, IDA Pro, Ghidra, Hopper, Frida
- Network Analysis: Wireshark, DirBuster
- Big Data: Lucene, ElasticSearch, AWS Athena
- Threat Intel Platforms: VirusTotal, Validin, Shodan
Team & Environment
You will join the Threat Intelligence team at Lookout, working alongside experts dedicated to protecting mobile users from sophisticated threats.
Lookout Inc is an equal opportunity employer.
