1

Malware Reverse Engineer Jobs in California (NOW HIRING)

CSIRT Engineer (HYBRID)

Palo Alto, CA · On-site

$60K - $150K/yr

GIAC Reverse Engineering Malware (GREM) * GIAC Defending Advanced Threats (GDAT) * GIAC Cyber Threat Intelligence (GCTI) * Certified Information Systems Security Professional (CISSP) * Other ...

Malware reverse engineering skills. * Expertise with incident response frameworks. * Experience in the financial sector. * SANS, CHFI, OSCP or similar certification. This role requires working from a ...

Malware reverse engineering skills. * Expertise with incident response frameworks. * Experience in the financial sector. * SANS, CHFI, OSCP or similar certification. This role requires working from a ...

... reverse engineering countermeasures and binary protection, experienced with code obfuscation, VMP, anti-debugging, anti-injection, malware analysis, etc. Preferred Qualifications - Bachelor or above ...

... reverse engineering countermeasures and binary protection, experienced with code obfuscation, VMP, anti-debugging, anti-injection, malware analysis, etc. Preferred Qualifications - Bachelor or above ...

... reverse engineering countermeasures and binary protection, experienced with code obfuscation, VMP, anti-debugging, anti-injection, malware analysis, etc. Preferred Qualifications - Bachelor or above ...

Applicants should have expertise or experience in two or more of the following areas: - Binary analysis and malware/exploit reverse engineering using tools like Ghidra, IDA or Binary Ninja - Product ...

Senior Software Engineer

San Francisco, CA · On-site +1

$144K - $190K/yr

... malware platform available. Senior hires will be entrusted with broad decision-making ... Experience with malicious software analysis and reverse engineering * MS or PhD in Computer Science ...

SR. Security Architect

Orange, CA · On-site

$85 - $90/hr

Certified Information Systems Security Professional (CISSP) or GIAC Reverse Engineering Malware (GREM) or similar. Bachelor's degree in a technical field such as computer science, computer ...

Experience performing malware triage or reverse engineering. Background working in consulting, incident response firms, or managed detection and response environments. Industry certifications such as ...

$151K - $208K/yr

Experience with malware triage or reverse engineering. * Background in consulting, incident response, MDR, SOC, or other 24x7 security operations environments. * Certifications such as GCFA, GCFE ...

next page

Showing results 1-20

Malware Reverse Engineer information

See California salary details

$80.9K

$134.5K

$192.4K

How much do malware reverse engineer jobs pay per year?

As of Jun 25, 2026, the average yearly pay for malware reverse engineer in California is $134,501.00, according to ZipRecruiter salary data. Most workers in this role earn between $87,800.00 and $175,700.00 per year, depending on experience, location, and employer.

What does a Malware Reverse Engineer do?

A Malware Reverse Engineer analyzes malicious software to understand its functionality, origin, and potential impact. They use tools like debuggers, disassemblers, and virtual environments to deconstruct malware and identify vulnerabilities or attack patterns. Their work helps in developing security defenses, creating detection signatures, and improving incident response. This role requires strong knowledge of programming, operating systems, and cybersecurity principles.

What are some typical challenges faced by Malware Reverse Engineers in their daily work?

Malware Reverse Engineers frequently encounter highly complex or obfuscated malware designed to resist analysis, which can make the process both time-consuming and mentally demanding. Staying ahead of constantly evolving attack techniques requires ongoing learning and adaptability. The role often involves collaborating with incident response teams, threat intelligence analysts, and security researchers to provide clear, actionable insights on emerging threats. Successfully overcoming these challenges is critical for protecting organizational assets and staying current with the ever-changing cybersecurity landscape.

What are the key skills and qualifications needed to thrive in the Malware Reverse Engineer position, and why are they important?

To thrive as a Malware Reverse Engineer, you need strong expertise in reverse engineering, assembly language, and programming, often backed by a degree in computer science or cybersecurity and experience with malware analysis. Familiarity with tools such as IDA Pro, Ghidra, OllyDbg, and relevant certifications like GREM or OSCP is highly valued. Analytical thinking, meticulous attention to detail, and clear written communication are important soft skills in this field. These skills ensure accurate identification, dissection, and documentation of malicious code, supporting effective threat response and mitigation.

What are the most commonly searched types of Malware Reverse Engineer jobs in California? The most popular types of Malware Reverse Engineer jobs in California are:
What are popular job titles related to Malware Reverse Engineer jobs in California? For Malware Reverse Engineer jobs in California, the most frequently searched job titles are:
What job categories do people searching Malware Reverse Engineer jobs in California look for? The top searched job categories for Malware Reverse Engineer jobs in California are:
What cities in California are hiring for Malware Reverse Engineer jobs? Cities in California with the most Malware Reverse Engineer job openings:
Infographic showing various Malware Reverse Engineer job openings in California as of June 2026, with employment types broken down into 100% Full Time. Highlights an 92% Physical, 3% Hybrid, and 5% Remote job distribution, with an average salary of $134,501 per year, or $64.7 per hour.
Knox Security Researcher

Knox Security Researcher

Omega Solutions Inc

Mountain View, CA • On-site

Other

Posted 19 days ago


Job description

Knox Security Team Position

As part of the Knox Security team, security research engineers identify and solve difficult security challenges involving Samsung's mobile and enterprise laptop products. Team members are typically expert in one or more specialties, and can expect to learn more about other areas from exposure to the rest. Broad areas of work include researching and architecting hardware-based and software security mechanisms, performing vulnerability assessments, analyzing reported exploits and suggesting ways to strengthen security, and developing automated tools for security analysis of code and binaries. This is an R&D position, and research publications in academic conferences and patents are encouraged.

Technical Keywords: Secure design and architecture, cryptography, malware, access control, exploitation, vulnerability assessment, reverse engineering, static and dynamic analysis, fuzz testing, emulation, security research, UEFI/BIOS, TPM, ARM TrustZone, hypervisor

Responsibilities:
  • Propose client security features at various layers of the stack for Samsung's smartphones and PCs (hardware-based, UEFI/BIOS, ARM TrustZone, hypervisor, Linux/Windows/Android) to achieve enterprise-level PC/smartphone security and work with product management teams to refine proposals
  • Design and architect security features using hardware security features, access control, cryptography, and secure protocol design.
  • Provide expert security guidance to global development teams and ensure security requirements are met through the development process
  • Review existing feature designs and propose enhancements to secure them further
  • Perform security assessments of various layers of the software stack
  • Use existing tools and develop new tools for automated vulnerability assessment as required
  • Keep up-to-date with latest attacks, analyze exploits from any reported incidents, and provide expert security guidance to global development teams to ensure proper fixes for security issues
  • Research and innovate security through academic publications in top security and systems conferences and patents
Minimum Qualifications:
  • Undergraduate degree in technical field (e.g., Engineering or Computer Science) or equivalent practical experience
  • Demonstrable experience with computer security issues, as demonstrated by:
    • Conference papers or talks
    • Academic or industry experience
    • Vulnerability disclosures, such as CVEs
    • Tools developed to analyze computer programs
  • A sense of humor!
Preferred Qualifications:

Typically requires 10+ years of related experience in a professional role with a Bachelor's degree; or 8+ years with a Master's degree; or 5+ years with a PhD; or equivalent experience. Experience as a tech lead or a security architect for big projects and previous research experience with computer security are a plus. Professional or practical experience in one or more of the following areas:

  • Ability to securely design and architect features with an understanding of threat and trust models, cryptography, access control, and secure protocol design
  • PC/Windows/Client Security: An overall understanding of the Windows/PC/Client hardware and software stack, with deeper technical knowledge of in one or more of the following areas:
    • Windows OS, security threats (malware, ransomware, rootkits) and defenses
    • Hardware technologies such as Client VT-x, TXT, and CSME, TPM
    • UEFI/BIOS, secure boot, system management mode, hypervisor-based security using Hyper-V or nested hypervisors
  • Android/Linux/Firmware Security: A holistic understanding of the Android/Linux/ARM smartphone hardware and software stack, with deeper technical knowledge in of one or more of the following:
    • Android framework security and internals, SELinux/SEAndroid
    • Linux kernel, drivers, bootloaders, ARM TrustZone, hypervisors
  • Vulnerability Assessment and Tooling: Knowledge of exploitation techniques, mitigations, and
    • Buffer overflows, return-oriented programming, heap spraying, ASLR, access control
    • Experience using security assessment techniques such as fuzz testing, reverse engineering, static and dynamic analysis, symbolic execution, emulation
    • Ability to use a programming language of choice to write proof-of-concept exploits, patches, and develop new tools for automated testing
  • Boundless optimism!