Security Researcher – Supply Chain & Malware Analyst

About the role

We are seeking an experienced Security Researcher to join a cutting‑edge cybersecurity team in Ireland. The role focuses on defending modern software ecosystems by investigating supply‑chain attacks, analysing malware, and creating innovative detection tools.

Key responsibilities

• Conduct in‑depth research on software supply‑chain threats, emerging attack techniques and advanced adversary behaviours.
• Analyse, reverse‑engineer and investigate malware, vulnerabilities and malicious packages to develop detection methods.
• Design, build and maintain open‑source tools that improve detection, analysis and prevention of supply‑chain attacks.
• Research threat actors and APT groups, documenting tactics, techniques and procedures.
• Translate technical findings into research reports, whitepapers and documentation for internal and external audiences.
• Lead research initiatives from concept to implementation while collaborating with engineering, product and security teams.
• Monitor evolving cybersecurity trends affecting open‑source and cloud‑native environments.

Required profile

• Minimum 5 years of experience in cybersecurity research, threat research, malware analysis or vulnerability research.
• Strong software development background with production‑quality tool delivery.
• Deep understanding of SDLC, DevSecOps and CI/CD pipelines.
• Knowledge of software supply‑chain security and open‑source package ecosystems (npm, PyPI, Maven, etc.).
• Experience using AI‑powered tools to enhance research and automation.

Required skills

• Malware analysis
• Reverse engineering
• Software development (e.g., Python, Go)
• CI/CD and DevSecOps practices
• Supply‑chain security
• Knowledge of npm, PyPI, Maven repositories
• AI‑enhanced research tools