Staff Threat Researcher

I monitor OSINT sources, MalwareBazaar, public feeds, social media, and threat blogs to identify emerging malware trends and maintain daily YARA and AV-engine coverage. I conduct static and dynamic analysis of malware, with particular focus on downloader and loader families, their infection chains, behavioral patterns, and infrastructure.

I develop generic and behavioral YARA signatures, author VirusTotal LiveHunt rules, and correlate samples, delivery mechanisms, network infrastructure, and command-and-control activity to reconstruct attack footprints. I also build automation for large-scale threat hunting, IOC extraction, and detection workflows; contribute to efficacy testing; publish threat research on Zscaler ThreatLabZ; and mentor team members.

I led a team of malware analysts responsible for tracking, classifying, and creating generic detection signatures for malicious PE files across automated detection pipelines. I performed reverse engineering of complex malware families and produced behavioral and technical documentation, threat reports, and internal Threat Encyclopedia content.

I designed automated hunting crawlers to collect malware samples and IOCs from security blogs, VirusTotal, and public feeds. I delivered reverse engineering and malware analysis training, collaborated with threat intelligence, automation, and engineering teams, and supported technical recruitment interviews.

I analyzed customer-escalated malware false negatives and false positives, identified detection gaps, and deployed targeted fixes for FireEye Endpoint products. I reverse engineered Windows malware and investigated evasive behaviors, including sandbox and analysis evasion techniques and persistence mechanisms.

I designed an internal alert analysis system to automate triage, identify likely false positives, and speed remediation. I also built automation utilities and crawlers to collect samples from public feeds, validate product detections, and streamline repetitive analysis processes.

I performed static and dynamic malware analysis, code-level inspection, behavioral profiling, and file-property-based malware classification. I researched and implemented behavior-based detection signatures to improve proactive malware detection and analyzed malicious macro-enabled Microsoft Office documents to develop corresponding detection logic.

I authored and executed test cases supporting AV-TEST, AV-Comparatives, and VB100 certification efforts. I also developed Python automation utilities for report parsing, web scraping, and bulk data processing, reducing the manual effort required for daily threat research workflows.