Malware Researcher (Remote)
Can be done from 49 countries
Andorra, Albania, Austria, Åland Islands, Bosnia and Herzegovina, Belgium, Bulgaria, Switzerland, Cyprus, Czechia, Germany, Denmark, Estonia, Spain, Finland, Faroe Islands, France, United Kingdom, Guernsey, Gibraltar, Greece, Croatia, Hungary, Ireland, Isle of Man, Iceland, Italy, Jersey, Liechtenstein, Lithuania, Luxembourg, Latvia, Monaco, Moldova, Montenegro, North Macedonia, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Sweden, Slovenia, Slovakia, San Marino, Ukraine, Vatican City
The full posting
About Us
Cracken is an applied AI lab building world’s first full kill chain proactive cyber platform. Built by cyber warfare-experienced operators and AI researchers Cracken keeps digital infrastructure resilient so businesses and societies operate.
We are expanding globally and seeking a talented Malware Researcher to strengthen our threat intelligence capabilities and enhance our AI Agent's understanding of the evolving malware landscape.
Malware Research & Analysis
- Perform static and dynamic analysis of malware samples ranging from commodity threats to sophisticated APT campaigns
- Conduct reverse engineering of malicious binaries, scripts, and documents using industry-standard tools
- Research emerging malware families, attack techniques, and evasion mechanisms (including polymorphic malware)
- Track threat actor TTPs and map findings to frameworks like MITRE ATT&CK
Detection & Automation
- Build AI-based automation tools and pipelines for large-scale malware processing and analysis
AI Integration & Research
- Collaborate with AI engineers to integrate malware intelligence into Cracken's agentic framework
- Help develop automated malware analysis capabilities within our AI Agent
Intelligence Production
- Produce comprehensive technical reports and threat assessments
- Be active in the offensive AI community, sharing insights and staying ahead of adversarial techniques
- Present findings to internal stakeholders and contribute to product development
- Monitor threat landscape trends and provide strategic threat intelligence insights
Technical Expertise
- 5+ years of experience in malware analysis, reverse engineering, or threat research
- Knowledge programming languages (C/C++)
- Understanding of various operating systems internals (Windows, Linux, macOS, etc.), file systems, processes
- Mobile malware analysis experience
- Experience with virtualization and sandboxing environments for dynamic analysis
Security Knowledge
- Solid understanding of malware techniques: persistence mechanisms, polymorphic malware, C2 communications, evasion tactics
- Knowledge of cryptographic algorithms commonly used by malware
Nice to Have
- Experience with agentic AI in cybersecurity
- OSINT and dark web research capabilities
Why Cracken?
- Real-world impact: Our technology is validated in nation-state operations and grounded in hands-on internal research
- Team with a mission: Ukrainian-heavy international team of PhDs, professors, and top-tier industry veterans, driven by intrinsic motivation shaped by real-world adversity
- Adaptive roles: We shape roles around exceptional talent - your ownership and drive will define your path
- Perfect timing: Operating at the intersection of AI, cybersecurity, and autonomous systems, Cracken is uniquely positioned to win against sophisticated adversaries
What we offer
- Ownership over a core cybersecurity product
- Direct collaboration with founders and elite cyber operators
- High autonomy and real impact on product direction
- Fully remote & flexible work setup
- Competitive compensation
Where you can be based
This position is 100% remote and open to applicants based in these 49 countries: Andorra, Albania, Austria, Åland Islands, Bosnia and Herzegovina, Belgium, Bulgaria, Switzerland, Cyprus, Czechia, Germany, Denmark, Estonia, Spain, Finland, Faroe Islands, France, United Kingdom, Guernsey, Gibraltar, Greece, Croatia, Hungary, Ireland, Isle of Man, Iceland, Italy, Jersey, Liechtenstein, Lithuania, Luxembourg, Latvia, Monaco, Moldova, Montenegro, North Macedonia, Malta, Netherlands, Norway, Poland, Portugal, Romania, Serbia, Sweden, Slovenia, Slovakia, San Marino, Ukraine and Vatican City.
Text as Cracken published it; last compared with the original on 13 Nov 2026.
The application
Your details, CV and LinkedIn, then 2 questions.
- 1.Do you have experience with the internals of various operating systems (Windows, Linux, macOS, etc.), including file systems and processes? Please specify your level of experience and the contexts in which you have worked with each.Short answer
- 2.Do you have experience working with agentic AI in cybersecurity?Yes or no
Taken from Cracken's application form as it stood on 13 Nov 2026.
The employer: Cracken
Cracken's AI platform probes a company's full kill chain for exploitable attack paths; a Malware Researcher post is open, remote within Europe.
Pay and benefits: Full-time remote research role within Europe, supporting the product's threat intelligence.
Other security roles worth a look

Applied Security Researcher (shows the role here)
Wiz · Threat Intel & Research · Tel Aviv· 4mo agoDetails

Senior / Staff Threat Intelligence Analyst, Hacks (shows the role here)
TRM Labs · Threat Intel & Research · Remote· 1mo agoDetails
$140,000–$180,000/yr
Associate Principal Malware Analyst (shows the role here)
Dragos · Threat Intel & Research · Remote· 1w agoDetails
$182,000/yr
Principal Specialist Sales Engineer, Data Security - Majors, East (shows the role here)
Zscaler · Architecture & Consulting · Remote· 3mo agoDetails
$175,875–$251,250/yr
Staff Security Researcher (shows the role here)
Palo Alto Networks · Threat Intel & Research · Office - USA - CA - Headquarters· 9mo agoDetails
$113,000.00–$182,700.00/yr
Let security teams come to you
Security teams sometimes ask us directly for someone with a given specialty, clearance or certification. Join the candidate pool once and we put you forward when a brief matches, and only after you say yes. No cost to you.
Hear first when Cracken posts a security role
We read Cracken's careers system around the clock and send its new security roles in a weekly email, along with comparable openings at other employers. Free; leave whenever you like.