---
title: 'Malware Researcher (on-site) at OPSWAT'
canonical: 'https://feeny.ai/job/malware-researcher-on-site-opswat-timisoara-sjgm08bg0s56'
type: 'job'
last_seen: '2026-10-18'
---

# Malware Researcher (on-site) at OPSWAT

- **Company:** OPSWAT
- **Location:** Timișoara, Romania
- **Posted:** 2026-10-14
- **Last confirmed live:** 2026-10-18
- **Apply:** https://www.opswat.com/jobs/4741316005?gh_jid=4741316005

## Job description

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.

OPSWAT, a global leader in IT, OT, and ICS critical infrastructure cybersecurity, delivers an end-to-end platform that gives public and private sector organizations and enterprises the critical advantage needed to protect their complex networks, secure their devices, and ensure compliance. Over the last 20 years our commitment to innovative technology has earned the trust of more than 1,700 organizations, governments, and institutions globally, solidifying our role in protecting the world’s critical infrastructure and securing our way of life.

## What You Will Be Doing

- Analyze malware samples, statically and dynamically, and use what you learn to improve our machine learning based detection
- Root-cause false positives and misses in our malware detection engines down to the failing feature, model, or label
- Hunt for coverage gaps across malware families, file types, and toolchains, and run adversarial tests (packing, obfuscation, polymorphism, format abuse) against our own detectors
- Turn confirmed gaps into prioritized plans for the ML team, weighed by prevalence, severity, and false-positive cost, and keep engineering and product informed on coverage and residual risk
- Propose and validate detection features, YARA rules, and heuristics grounded in observed malware behavior
- Curate and quality-check training and evaluation datasets: provenance, labeling, family balance
- Validate detection changes before release and challenge results that look too good

## What We Need From You

- 3+ years in malware analysis, threat research, or detection engineering
- Bachelor’s degree in Computer Science, Information Security, or a related field, or an equivalent hands-on track record
- Strong static analysis skills: PE internals first, plus ELF/Mach-O, packing and obfuscation indicators
- Hands-on with YARA, IDA/Ghidra/radare2, pefile/LIEF, and dynamic analysis in a sandbox
- Fluency with malware families, campaigns, and TTPs; MITRE ATT&CK as working vocabulary
- Python good enough to automate your own analysis at scale
- Interest in putting your analysis to work in a machine learning detection engine; no ML background required
- Clear written English

## Nice to Have

- Understanding of how ML classifiers fail and get evaded (drift, label noise, adversarial samples), or experience alongside an ML detection team
- Reverse engineering depth: unpacking, anti-analysis defeat, shellcode, obfuscated scripts
- Familiarity with threat intel platforms and sample feeds (VirusTotal, MalwareBazaar, MISP)
- Exposure to non-PE threats: documents, macros, archives, scripts
- Certifications or public work (GREM, OSCP, conference talks, published research)

OPSWAT is an equal opportunity employer. We celebrate diversity and are committed to providing an environment where equal employment opportunities are extended to all employees and applicants, free of discrimination and harassment of any type. All employment decisions are based on individual qualifications, job requirements, and business needs without regard to race, color, religion, age, sex, national origin, disability status, genetics, protected veteran status, sexual orientation, gender identity or expression, or any other category protected by federal, state, or local laws.

Recruiting Agencies: we do not accept unsolicited resumes from third party agencies for any of our open positions. To submit resumes for our jobs, there must be a recruiting contract approved by our legal team and endorsed by both parties. We are currently not accepting additional 3rd party agencies at this time.

## About OPSWAT

## Company Overview
- **One-liner**: OPSWAT protects the world’s critical infrastructure by securing every file, device, and data transfer across IT, OT, and air-gapped networks using its AI-powered MetaDefender Platform.
- **Entity Type**: Private (venture-backed; $125M total funding raised; bootstrapped for many years)
- **Headquarters**: Tampa, Florida, United States
- **Founded**: 2002
- **Founders**: Benny Czarny

## Core Business
- **Primary industry**: Cybersecurity (critical infrastructure protection)
- **Target customers**: B2B, Enterprise, Government – including nuclear facilities, defense networks, energy grids, financial institutions, and other mission-critical organizations.
- **Mission / purpose**: “Trust no file. Trust no device.” – prevent known, unknown, and AI-generated threats from reaching the systems the world depends on.

## Products & Services
- **MetaDefender Platform** (SaaS / On-premises / Hybrid): Unified cybersecurity platform providing file security, email security, removable media protection, network security, cross-domain transfer, endpoint compliance, and cloud security. Key technologies: Deep CDR™ (Content Disarm and Reconstruction), Metascan™ Multiscanning (30+ anti-malware engines), AI-driven threat prediction, Adaptive Sandbox, Proactive DLP, and File-Based Vulnerability Assessment.
- **Peripheral & Removable Media Protection**: Kiosk-based scanning and compliance enforcement for USB drives and transient assets.
- **Managed File Transfer**: Secure cross-boundary file movement with built-in threat prevention, policy enforcement, and audit trails.
- **Data Diode & Security Gateway Solutions**: Hardware-enforced unidirectional data transfer for air-gapped and segmented networks.
- **Email Security**: Neutralizes weaponized attachments and embedded threats using Deep CDR and Multiscanning.
- **Access & Endpoint Security (OESIS Framework)**: Assesses device posture before granting network access, covering managed and unmanaged devices.
- **OPSWAT Academy**: Professional certification in Critical Infrastructure Protection (CIP) – 28 courses, 456,000+ registered students, 268,000+ certified.

## Market Standing
- **Valuation / Market Cap**: Not publicly disclosed
- **Key Metric**: Annual Revenue $110M (LinkedIn, 2025 estimate); Total Funding $125M
- **Notable Investors / Partners**: Not explicitly listed in search results, but the company is trusted by 98% of U.S. nuclear power facilities and 1,500+ organizations in 80+ countries
- **Growth Signals**: 854 employees (+16.9% YoY, +167 people); operates in 28 countries (including Vietnam, Romania, Hungary, UK, Israel); pre-validated against NIST 800-53, CMMC 2.0, NERC CIP, Zero Trust, ISO 27001, SOC 2, NEI 08-09 Rev 6

## Competitive Advantages
- **Prevention-first philosophy** – stops threats before execution, unlike detection-based tools.
- **Deep CDR™ Technology** – reconstructs files to remove malware while preserving usability.
- **Multiscanning with 30+ anti-malware engines** – near 100% detection rate.
- **AI embedded natively** – predicts and neutralizes AI-generated threats.
- **Air-gap and cross-domain expertise** – data diodes and security gateways for the most sensitive networks.
- **Regulatory compliance** – validated for the world’s most rigorous standards in nuclear, defense, and critical infrastructure.

## Strategic Focus
- **Deepening AI capabilities** in threat prediction and content verification.
- **Expanding the MetaDefender Platform** to cover more attack surfaces (Cloud, OT, IT).
- **Growing the OPSWAT Academy** to train a global workforce in CIP.
- **Scaling global reach** – already in 28 countries, targeting more government and enterprise segments.

## Why Work Here
- **Culture**: Mission-oriented, innovative, transparent, and collaborative. “You are trusted to do your job” – teams have ownership and autonomy. Open communication across all levels.
- **Remote / Hybrid / Office**: Flexible-work arrangements; global offices in Tampa, Vietnam, Romania, Hungary, UK, Israel, and others.
- **Compensation & Benefits**: Competitive salaries, excellent insurance, stock options, generous PTO, multifaceted reward programs, quarterly/annual reviews.
- **Workplace Wellness**: Green office spaces, workout/exercise facilities, friendly environment, work-life balance emphasis.
- **Training & Development**: OPSWAT Academy provides privileged CIP certification; mentorship and career growth programs.
- **Recognition**: Named one of the best companies to work for in Asia by HR Asia Magazine.

## Sources
1. [OPSWAT Website](https://www.opswat.com/)
2. [OPSWAT Company Page](https://www.opswat.com/company)
3. [OPSWAT About Page](https://www.opswat.com/company/about)
4. [OPSWAT Careers Page](https://www.opswat.com/careers)
5. [OPSWAT LinkedIn](https://www.linkedin.com/company/opswat)

## Other roles at OPSWAT

- [Engineering Manager - FPGA & Hardware - Enforced Security](https://feeny.ai/job/engineering-manager-fpga-hardware-enforced-security-opswat-tampa-shdyqrbjq1ce) — Tampa, FL
- [Engineering Manager](https://feeny.ai/job/engineering-manager-opswat-veszprem-a37386vrcdxe) — Veszprém, Hungary
- [Channel Account Manager](https://feeny.ai/job/channel-account-manager-opswat-london-1am8hx7kw9fv) — London, United Kingdom
- [Analytics Engineer](https://feeny.ai/job/analytics-engineer-opswat-ho-chi-minh-city-v1c7qv08x50y) — Ho Chi Minh City, Vietnam
- [Sales Engineer](https://feeny.ai/job/sales-engineer-opswat-tampa-70ab34j4avf3) — Tampa, FL
- [Senior Agentic Software Engineer - Legal](https://feeny.ai/job/senior-agentic-software-engineer-legal-opswat-ho-chi-minh-city-bd6rf21pn248) — Ho Chi Minh City, Vietnam
- [Support Engineering Intern (AI & Automation Focus)](https://feeny.ai/job/support-engineering-intern-ai-automation-focus-opswat-tampa-h61jqagc8w44) — Tampa, FL
- [Support Engineering Intern (AI & Automation Focus) (on-site)](https://feeny.ai/job/support-engineering-intern-ai-automation-focus-on-site-opswat-timisoara-93r6xtrex3h0) — Timișoara, Romania
- [AI Engineer, Employee Products](https://feeny.ai/job/ai-engineer-employee-products-opswat-timisoara-4j1xe9xr0rab) — Timișoara, Romania
- [Product Analyst (Sales & Marketing)](https://feeny.ai/job/product-analyst-sales-marketing-opswat-ho-chi-minh-city-mk4x0ddms6tp) — Ho Chi Minh City, Vietnam