Sr. Security Researcher

at  Fortinet

Explore new territory with smart people at Fortinet. Our mission is to deliver the most innovative, highest performance network security platform in the market! Fortinet (NASDAQ: FTNT) is a worldwide provider of network security appliances and the market leader in unified threat management (UTM). Our products and subscription services provide broad, integrated and high-performance protection against dynamic security threats while simplifying the IT security infrastructure. Our customers include enterprises, service providers and government entities worldwide, including the majority of the 2010 Fortune Global 100.

REQUIRED SKILLS AND QUALIFICATIONS:

• At least 3 years of experience in cyber security
• Strong understanding of assembly language (ASM)
• Experience with reverse engineering tools, such as IDA Pro, x32dbg/x64dbg, WinDbg, Ghidra, GDB, dnSpy, etc.
• Programming experience with languages (e.g. C, C++, Python), scripting languages (e.g. PowerShell, JavaScript, VBS)
• Knowledge of common cryptographic methods and algorithms (e.g. AES, DES, RSA), hashing, and encoding techniques
• Strong knowledge of Windows and Linux operating systems
• Strong knowledge of virtualization technologies and sandboxing techniques
• Strong understanding of code obfuscation and de-obfuscation
• Knowledge of most common networking protocols such as TCP/IP, DNS, HTTP(S), etc.
• Ability to work collaboratively in a team and independently
• Good communication skills
  Education – Bachelor or higher degree in computer science or related fields.
  The US base salary range for this full-time position is $132,500-$171,500. Fortinet offers employees a variety of benefits, including medical, dental, vision, life and disability insurance, 401(k), 11 paid holidays, vacation time, and sick time as well as a comprehensive leave program.
  Wage ranges are based on various factors including the labor market, job type, and job level. Exact salary offers will be determined by factors such as the candidate’s subject knowledge, skill level, qualifications, experience, and geographic location.
  All roles are eligible to participate in the Fortinet equity program, Bonus eligibility is reviewed at time of hire and annually at the Company’s discretion.
  Why Join Us:
  We encourage candidates from all backgrounds and identities to apply. We offer a supportive work environment and a competitive Total Rewards package to support you with your overall health and financial well-being. Embark on a challenging, enjoyable, and rewarding career journey with Fortinet. Join us in bringing solutions that make a meaningful and lasting impact to our 660,000+ customers around the globe

• Perform forensic analysis for cyber incidents
• Collect and analyze artifacts from compromised systems to reconstruct the attack timeline
• Identify the methods and tools used by attacker and understand how the attack occurred
• Determine the full scope of cyber incident
• Provide solutions to prevent future incidents
• Link the attack to a known threat group and identify potential attacker location
• Write forensic investigation report
• Conduct in-depth analysis of malware (including static and dynamic analysis) and uncover its capabilities
• Write detailed malware analysis report
• Stay up-to-date on the latest exploitation/attack techniques