Malware Researcher - Threat Research

About TrendAI™  TrendAI™, the global AI security leader and enterprise business unit of Trend Micro, empowers organizations with full AI visibility and consolidated security that inspires confidence, drives innovation, and eliminates risk. At TrendAI™, we’re always seeking exceptional talent; people who want to collaborate with the best and push boundaries together. Here, your work goes beyond building a career. You will help protect what matters and play a vital role in shaping a safer, more trustworthy AI-powered future.

AI Fearlessly.
Position Summary  As a Malware Researcher, you will be part of a team that analyzes advanced malware samples using static and dynamic analysis with the primary goal of decoding and detecting malware communication mechanisms. You will also be using AI-based solutions to support and accelerate your analysis of malware threats. You will be providing various detection solutions based on the detailed analysis of the malware.
Work Location  Ontario, Canada | Remote
What You’ll Do   Reverse-engineer malware samples to identify malware communication mechanisms and analyze malware network traffic to develop Snort signatures.
Produce documentation describing malware behaviour and detection strategies.
Communicate research results to customers, team members, and management.
Collaborate with team members to improve the analysis and response process.
Monitor security industry publications, newsgroups and press releases to identify new or active malware threats.
What You Should Have (Required)   Advanced knowledge in reverse engineering on various architectures and platforms.
Familiarity with debugging tools such as IDA Pro, Ghidra, Win Dbg, x64dbg etc.
In-depth knowledge of modern operating systems including Windows and Linux.
Knowledge of various encryption and obfuscation techniques used by malware.

Experience of low level programming languages such as Assembly and/or C/C++ is a plus.
In-depth knowledge of TCP/IP and other networking protocols.
RFC-level understanding of popular protocols like HTTP/FTP/SMTP/SMB.
Familiarity with tools such as Snort, Wireshark, Windows Sysinternals and VMware.
Experience or familiarity with Mitre ATT&CK Framework, Stix 2.x format for Cyber Threat Intelligence (CTI) and YARA rules.
Familiarity with scripting languages such as Python, Ruby, Perl, JavaScript, Power Shell or Bash.

Experience with AI agentic environments, MCP and harness engineering, efficient use of different AI models, and effective prompt writing.
Ability to analyze and describe complex application behaviours.

Experience of reverse engineering is a plus.
Proficient English communication skills, both written and oral.
Great attention to details and personal QA.
Team player, having problem-solving skills, and self-starter with the ability to work with minimal supervision.
Compensation  Expected base salary range: $106,000 – $145,000 per year (CAD)
Bonus/incentive eligibility:
Eligible for the company-wide performance bonus. Final pay within this range depends on job-related factors such as experience, skills, and certifications.

What We Offer You  You’re important to us. What matters to you matters to us too. TrendAI™ provides benefit options for you and your family:
Group benefits program with health, vision, and dental coverage
Telehealth virtual health services
Life insurance
Short- and long-term disability
Critical illness insurance
Prenatal, maternity, parental, and medical leave
Mental health wellness program
Wellness incentive program
Retirement savings with company match (group RRSP)
Paid time off 14 annual holidays
Tuition assistance
Employee resource groups
We offer competitive compensation with bonus opportunity tied to company performance, along with room to enhance your skills through…