Brazil Remote (Global)

CloudLinux is hiring a Malware Intelligence Analyst (worldwide remote, work anywhere)

Responsibilities

  • Analyze and classify web malware: PHP shells, JavaScript injectors, WordPress backdoors, SEO spam, redirectors, cryptominers, and other threats targeting the hosting ecosystem
  • Reverse-engineer obfuscated PHP and JavaScript to understand attacker techniques and extract detection patterns
  • Write and refine PCRE-based detection signatures for our scanning engine precision matters, false positives erode customer trust
  • Maintain processing SLAs as part of a globally distributed team providing round-the-clock malware coverage
  • Research emerging threats new CMS exploitation techniques, supply-chain attacks on plugins/themes, zero-day delivery methods

Requirements

  • Strong PCRE regex expertise, you understand anchors, non-capturing groups, performance implications, and can write complex patterns that are both accurate and efficient
  • 3+ years working with PHP and/or JavaScript, reading, understanding, and analyzing code (differentiate legitimate and malicious artifacts, no software engineering skills required)
  • Web malware reverse engineering, JS deobfuscation, PHP deobfuscation, unpacking encoded payloads
  • Understanding of web attack injection, XSS, RCE, file upload exploits, and how they manifest in hosting environments
  • Familiarity with web server and shared hosting architecture, Apache/Nginx/LiteSpeed, Reverse Proxy, PHP handlers, WAF, Namespaces, cgroups, Linux File system permissions
  • English proficiency at upper-intermediate level or above

Nice to Have

  • Experience with WordPress internals (themes, plugins, hooks)
  • Hands-on website cleanup or incident response experience
  • Penetration testing or red team background
  • Python scripting for automation and tooling
  • Experience with YARA rules or other signature formats
  • Familiarity with cPanel, Plesk, or DirectAdmin environments

Benefits

  • 5-day week (5 on / 2 off) on a fixed schedule aligned with your time zone
  • Paid 24 days of vacation per year
  • 10 days of national holidays
  • Unlimited sick leaves
  • Compensation for private medical insurance
  • Co-working and gym/sports reimbursement
  • Opportunity to receive a reward for the most innovative idea that the company can patent
  • Weekends and public holidays that fall within your schedule are compensated with either bonus payments or an extra vacation days

Work Arrangement

Remote (Worldwide)

Additional Information

  • Fixed schedule tailored to your time zone and preferences
  • English proficiency at upper-intermediate level or above is required
  • Fully remote position
  • Standard 5-day week (5 on / 2 off)
  • Weekends and public holidays falling within the work schedule are compensated
  • Onboarding process and modern tooling provided to bridge skill gaps
Required Skills
cPanel
About company
CloudLinux
TuxCare is a subsidiary of CloudLinux Inc., the maker of the #1 OS in security and stability for hosting providers. It offers a portfolio of security solutions for Linux and open-source software aimed at enterprise organizations.
All jobs at CloudLinux Visit website
Job Details
Category security
Posted 4 months ago