The Position:

We are seeking a highly motivated and technically proficient Windows Malware Researcher to join our security research division. This role is dedicated to determining the true intent behind cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious, with a focus on Windows malware research. You need to be independent, attentive to details, organized, eager to learn recent things, and eager to research and solve complex problems.

What you'll do:
Review cybersecurity prompts submitted to an AI system that the system could not confidently classify as benign or malicious
Determine the underlying intent and goal behind each prompt, and assess whether the user is pursuing a legitimate purpose or an intent to cause harm
Apply deep domain expertise to judge the technical context, specificity, and real-world uplift a response would give an attacker
Annotate each prompt with an intent label and a transparent written rationale, following the project guidelines
Independently annotate the same prompts as a second researcher; cases where researchers disagree are escalated to a reviewer
Flag ambiguous cases, emerging attack techniques, and gaps in the guidelines,



and help improve them

Requirements:
Minimum of 5 years of proven, hands-on experience in Windows malware analysis and research
Strong command of Windows internals and the Win32/NT API, including process injection, persistence, privilege escalation, and EDR/AV evasion techniques
Static and energetic analysis of PE files, including unpacking, deobfuscation, and sandbox and debugger use (x64dbg, IDA, Ghidra)
Experience with major malware families and categories: loaders, infostealers, RATs, ransomware, and C2 frameworks
Ability to write YARA rules and extract IOCs and TTPs mapped to MITRE ATT&CK;
Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation
Clear written communication in English, with the ability to document your reasoning concisely

Nice to have:
GIAC GREM, eCMAP, GIAC GCFA
Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research

📌 Windows Malware Researcher Kolkata
🏢 BlackBox Technologies
📍 Kolkata