Tech Lead - Malware and Vulnerability Research

We are seeking an experienced Tech Lead to manage the Domain Experts covering reverse engineering, malware research, and vulnerability research. This role is dedicated to the quality of intent analysis for cybersecurity prompts that an AI system could not confidently classify as benign or malicious, across the domains of the team.

You need to be a hands-on expert in your own field, with enough working knowledge of reverse engineering, malware research, and vulnerability research to judge prompts and guidelines that cross into the other team's domains. You also need to be independent, organized, and able to lead technical experts.

What you'll do:

• Lead and manage the Domain Experts of the team (Vulnerability Research & Reverse Engineering, Windows Malware Research, Linux/MacOS Malware Research, Android/iOS Security Research): priorities, workload, and performance
• Route incoming rows to the team's domains and rebalance freelancer capacity inside the team as row volume shifts
• Track team quality (agreement and disagreement rates, QA findings) and throughput, and report to the Group Manager
• Resolve escalated edge cases and prompts that span several domains, and work with the other Tech Lead when a prompt crosses into their field
• Keep the annotation guidelines consistent across the team's domains and propose updates
• Annotate or review directly when needed to unblock the team

• Minimum of 7 years of proven, hands-on experience in reverse engineering, malware research, or vulnerability research, with deep expertise in at least one of them
• Working knowledge across all domains of the team, enough to assess and coach the Domain Experts in each
• Solid working knowledge of the other team's fields: reverse engineering, malware research, and vulnerability research, including how malware behaves, how binaries are analyzed, and how exploits are built
• At least 2 years of experience leading or mentoring technical specialists (team lead, tech lead, or senior reviewer)
• Experience with quality processes such as QA sampling, calibration sessions, and quality metrics
• Strong analytical judgment: able to infer a user's underlying goal from a short prompt and separate defensive, educational, and research use from attack preparation
• Clear written and verbal communication in English

Nice to have:

• GIAC GREM, OSED, OSCP
• Demonstrated online achievements, write-ups, or contributions on platforms such as HackTheBox, Pwn2Own, TryHackMe, Bug Bounty programs, or published security research.