Senior Security Researcher - Threat Lab

Job Description:

Integral Ad Science (IAS) is a global technology and data company that builds verification, optimization, and analytics solutions for the advertising industry and we're looking for a Senior Security Researcher. Here at IAS, you will work with a diverse cast of peers distributed globally, with a focus on core values that are asserted by all employees from the top down. As an individual, you are encouraged to bring your true self to work everyday and leverage this along with your skillset to ensure the strongest possible contributions to products that protect our customers from fraudulent activity. In this role, you will be responsible for ongoing monitoring and surfacing of new threats in the digital advertising ecosystem. The Threat Lab has extensive interaction with large data sets (we monitor hundreds of thousands of transactions per second and collect tens of billions of events each day), fraudulent apps and programs, and malicious actors and campaigns.

• Analyze and investigate mobile and connected TV apps, as well as potentially malicious desktop applications, in order to strengthen IAS fraud detection products, conceptualize stories, and produce research reporting.
• Partner with Marketing to drive publication and distribution of noteworthy stories coming from internal investigations.
• Apply business insight to research for C-Level thought leadership stories that define high level trends by industry, vertical or geographic area.
• Stay on top of emerging threats that could be first to market blogs.
• Deploy and manage virtual analysis infrastructure for a small team.
• Assist product management, data science, and development in product/solution planning and prioritization.
• Build and maintain a device farm to enable novel analysis of IoT apps.

• Bachelors or Master's degree in data science, computer science, computer engineering, digital forensics, cyber security, or security studies
• At least 3-5 years reverse engineering and/or direct malware analysis experience, including virtual analysis environments
• In depth knowledge of designing and maintaining virtual infrastructure to support a team of malware analysts (ESXi, VirtualBox, Fusion or equivalent)
• Strong background in mobile operating systems, rooting/jailbreaking, and remote device administration
• Proficiency in both static and dynamic analysis of mobile and CTV applications
• Knowledge of the Threat Landscape and familiarity with threat tracking, attribution, and reporting
• Fluency in analysis tools such as IDAPro, Ghidra, Kali Linux, Flare-VM, Wireshark, etc.
• Excellent analytical abilities and a strong ability to think creatively when approaching issues
• Strong interpersonal and presentation skills required - both oral and written, with the ability to educate others about complex technology/methodologies and clearly articulate business level benefits/impacts
• Strong verbal presentation and writing skills, including the demonstrated ability to write clear and concise text

• Programmatic ad ecosystem/AdTech experience strongly preferred
• AWS/GCP experience
• Knowledge or awareness of RISC-V
• Experience with typical obfuscation and cryptographic techniques
• Strong SQL skills, including building functions & procedures, writing complex queries, and using SQL as an investigative tool (Amazon Athena knowledge an extra bonus)
• Familiarity or fluency in Python (Pandas/Numpy)
• Strong data mining skills focusing on anomaly detection
• Ability to synthesize technical information about large datasets to communicate both qualitatively and quantitatively
• Ability to read/write Regex and Yara