Associate Threat Detection Analyst - MD Sandbox
OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.
The Position
We are excited to welcome a motivated Associate Threat Detection Analyst to our expanding Technology Office team in Ho Chi Minh City.
In this role, you will contribute to the development and enhancement of high-performance software solutions that power our cutting-edge cybersecurity products across on-premise, cloud, and hybrid deployments. You will leverage our advanced AI-driven platform, which integrates machine learning models, behavioral analytics, anomaly detection, and generative AI capabilities to accelerate threat identification, automate complex malware analysis, predict emerging attack patterns, and build more resilient defenses against sophisticated threats including AI-generated and adaptive malware.
Working as part of a collaborative global team (with members in Vietnam, Spain, Romania, UK, US, Georgia, and Hungary), you will gain hands-on experience collaborating closely with senior engineers—both locally and remotely—in a supportive, international environment that prioritizes innovation, continuous learning, and the effective application of AI to solve real-world cybersecurity challenges.
What You Will Be Doing
- Malware Analysis & Reverse Engineering – the foundation of everything we do.
- AI-Enhanced Malware Analysis – Leverage AI-powered tools and models to accelerate threat detection workflows, including automated behavioral classification, anomaly scoring, similarity matching for malware families, and generative AI for simulating attack variants or generating high-quality detection rules.
- Sandbox Capability Development – implement new extraction features (filetype-specific parsers, config extractors, etc.) to enrich behavioral detection artifacts.
- Threat Indicator Development – identify and flag structural and behavioral patterns of interest.
- YARA Rule Vetting & Development – validate community rules and create tailored detection signatures.
- Detection Accuracy – hunt for misleading sandbox reports and ensure proper sample classification.
- Threat Detection Service – review, triage, and resolve detection inaccuracies reported by customers.
- Technical Initiatives – drive innovation to advance OPSWAT’s threat detection capabilities and maximize sandbox effectiveness.
- Knowledge Sharing – promote collaboration within the team and across OPSWAT.
- Automation – develop scripts and tools to streamline analysis workflows.
- Research – stay on top of evolving malware trends, TTPs, and sandbox detection techniques.
What We Need From You
Education
-
- Bachelor’s degree in Cybersecurity, Computer Science, Information Technology, or equivalent work experience.
- Advanced certifications (e.g., GREM, CEH, OSCP, or equivalent) are highly preferred.
Experience
-
- 6 months in malware analysis, reverse engineering, or threat detection engineering.
- Proven expertise in developing and tuning detection rules (YARA, SIGMA, IDS).
Skills & Competencies
-
- Strong grasp of reverse engineering fundamentals.
- Solid understanding of the cyber threat landscape and adversary techniques.
- Eagerness to use AI tools in practical ways for cybersecurity tasks, such as:
- Basic prompt engineering skills to craft clear, specific, and effective prompts.
- Applying generative AI (e.g., ChatGPT, Claude, or internal tools) to assist with threat intelligence summarization, code analysis, or idea generation.
- Willingness to learn and experiment with AI/ML concepts relevant to threat detection.
- Experience with scripting for automation (Python strongly preferred).
- Knowledge of malware techniques: packing, anti-analysis, injection, etc.
- Familiarity with the MITRE ATT&CK framework for mapping TTPs.
- Analytical mindset with a focus on actionable detection outcomes.
- Clear and effective communication skills, able to present findings to both technical and non-technical stakeholders.
Why You’ll Love Working Here
- Stable, growing international company with a strong global customer base.
- Supportive, professional, and diverse team spanning multiple continents.
- Real challenges and meaningful ownership on cutting-edge projects.
- Modern technology stack with opportunities to learn advanced systems programming.
- Comfortable office in Ho Chi Minh City.
- Mentorship, career growth, and exposure to international collaboration.
OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.
Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.