Threat Analysis - summer intern

Gen is a global company powering Digital Freedom through consumer brands including Norton, Avast, LifeLock, Avira, AVG, Reputation Defender, and CCleaner. Our combined heritage is rooted in providing safety for the first digital generations. We bring leading technology solutions in cybersecurity, privacy and identity protection to more than 500 million users in 150 countries so they can live their digital lives safely, privately and confidently today and for generations to come. Together, we have collective passion and a big vision to power Digital Freedom by protecting consumers and giving them control of their digital lives.

When you’re a part of Gen, you are provided access to a range of resources and support to ensure you can do your best work and live your best life. This includes flexible working options with generous time off and competitive benefits & compensation packages.

Diversity is foundational to how we do business because we know the greatest ideas and results come from our unique perspectives and differences. We strive to create a safe, inclusive environment where you can bring your whole self to work. Team members are valued, respected, and celebrated for who they are in a meaningful and exciting atmosphere. Gen is an equal employment opportunity employer. Employment decisions are based on merit, experience, and business needs. 

If this sounds like you—Gen has a dynamic, supportive culture with core values that celebrate diversity, promote teamwork, and encourage every team member to contribute and grow—join us!

About the role:

We are seeking a Threat Analysis Engineer who will play a crucial role in identifying, analyzing, and mitigating emerging scams and cyber threats to safeguard our customers' digital assets. Your responsibilities will include researching and analyzing various types of scams and scamming techniques to contribute to the continuous evolution of our anti-scam detection strategy and innovation to establish leadership in the market. You will also focus on analyzing and reverse engineering various types of cyberthreats to understand their behavior, propagation methods and potential impact on our customers' systems to implement detection mechanisms, ensuring the highest level of protection efficacy for our customers.

In the Threat Analysis team we are responsible to uphold our commitment to customer protection against threats delivered via various infection vectors, including PE and non-PE file formats (such as scripts, Office and PDF documents), as well as zero-day software vulnerabilities and exploits used to deliver malware. Detecting these types of threats is essential for maintaining overall protection efficacy across all our products and advancing our anti-scam detection strategy and innovation to remain a market leader. 

As part of the Threat Analysis team you will also handle threat hunting, analysis, classification and creation of detection patterns for multiple threats. Building the threat landscape while hunting is necessary to ensure the protection against new and evolving threats. 

We are responsible for understanding our protection mechanisms and capabilities, identify gaps and enhance our machine learning accuracy against threats. 

What you'll do:

• Conduct in-depth analysis of scam threats including phishing, social engineering and other fraudulent activities
• Analysis of malware samples to identify their functionalities and potential attack vectors
• Stay updated on the latest scam and malware trends, tactics and techniques used by scammers and threat actors to ensure proactive detection and response
• Threat hunting, analysis, classification and creation of detection patterns for multiple threats (such as scripts, Office and PDF documents), essential for maintaining the protection efficacy of our customers against the evolving online threats landscape          
• Conducting research and analysis of ongoing scam campaigns and developing prototypes to enhance scam protection mechanisms 
• Investigating software vulnerabilities, hunting for exploits leveraging those vulnerabilities and creating protection in Gen products
• Develop and maintain tools, scripts and automated processes to streamline analysis and detection workflows
• Monitor the correct function of our automatic processes, or find potential ways to improve them
• Write technical blog articles related to malware analysis, vulnerabilities, cybersecurity trends and best practices to educate and inform both technical and non-technical audiences 

What you'll need:

• Bachelor's degree in Computer Science, Information Security or related field and the drive to expand your horizons every day
• Proven experience in malware analysis, reverse engineering and threat analysis and reporting
• Proficiency in using malware analysis tools such as IDA Pro, Ghidra, debuggers as well as programming and scripting language knowledge, particularly Python
• Strong understanding of Windows internals, file formats, network protocols and assembly language
• Proficiency in creating database queries and working with data visualization and analytics tools such as Power BI, Kibana, and similar software is required.
• Excellent analytical and problem-solving skills with a keen attention to details
• Ability to work independently and collaboratively
• Effective communication skills, both written and verbal, with the ability to convey complex technical concepts

Gen is proud to be an equal-opportunity employer, committed to diversity and inclusivity. We base employment decisions on merit, experience, and business needs, without considering race, color, national origin, age, religion, sex, pregnancy, genetic information, disability, medical condition, marital status, sexual orientation, gender identity or expression, military or veteran status, or other unlawful factors. Gen prohibits discrimination based on these protected characteristics and recruits talented candidates from diverse backgrounds.

We consider individuals with arrest and conviction records and do not discriminate against employees for discussing their own pay or that of other employees or applicants. Learn more about pay transparency. 

To conform to U.S. export control regulations, applicant should be eligible for any required authorizations from the U.S. Government.