Staff DevOps Engineer (Malware Research)

pBitsight is a cyber risk management leader transforming how companies manage exposure, performance, and risk for themselves and their third parties. Companies rely on Bitsight to prioritize their cybersecurity investments, build greater trust within their ecosystem, and reduce their chances of financial loss. /ppBuilt on over a decade of technological innovation, its integrated solutions deliver value across enterprise security performance, digital supply chains, cyber insurance, and data analysis. /pulliWe invented the cyber ratings industry in 2011 /liliOver 3000 customers trust Bitsight /liliOver 750 teammates are dispersed throughout Boston, Raleigh, New York, Lisbon, Singapore, and remote /li /ulpbr/ppBitsight’s Threat Research and Operations team develops and deploys strategies to discover systems compromised by malware and potentially unwanted applications through in depth research and analysis of malware families and infrastructure. This operations role will build and manage novel tooling that supports Bitsight’s malware tracking efforts.

You will own and drive the evolution of one of the world’s largest malware tracking systems. We are looking for candidates who are passionate about cybersecurity and are able to design, build and maintain complex and distributed infrastructure that supports our collection strategies. /ppbr/ppbKey Responsibilities /b /pulliDesign, deploy, and manage scalable, high-volume malware tracking infrastructure /liliDevelop tools to automate provisioning of security research infrastructure /liliAutonomously identify and develop implementation plans for infrastructure improvement opportunities /liliCollaborate with engineering and product teams on the design of new production data feeds from threat research capabilities /liliIncrease infrastructure robustness through thoughtful design of data monitoring and alerting practices /liliProvision, configure, and deploy cloud infrastructure resources to support threat research operations /liliDocument infrastructure capabilities and functionality to support troubleshooting and response to data-related escalations /li /ulpbr/ppbRequired Skills and Experience /b /pulli5+ years in software and/or infrastructure development for data-intensive applications /liliDesigning network infrastructure to support high traffic applications /liliContributing clean, maintainable, and modular capabilities to a complex Python codebase /liliAutomating infrastructure provisioning using orchestration frameworks (e.g. Ansible, Terraform) /liliBroad knowledge across networking concepts and protocols with a focus on DNS /liliRemote administration of cloud service provider infrastructure (AWS and GCP) /liliStrong capacity for ownership and autonomy with an ability to independently drive incremental progress against long-term, complex objectives /liliFluent in English, spoken and written /li /ulpbr/ppbNice-to-have Skills and Experience /b /pulliFamiliarity with malware infrastructure, threat hunting, and network security concepts /liliDeveloping networking-intensive applications in Golang /liliImplementing data observability and query frameworks using tools such as ELK/Grafrana /liliInterfacing with domain registrars to manage domain registrations /liliManaging cloud compute infrastructure costs /li /ul