Web Security Malware Analyst – Hybrid (Lisbon)

About the role

We are looking for a Web Security Malware Analyst to join our team in Lisbon on a hybrid basis. The role focuses on analysing, reverse‑engineering and securing browser‑based applications, especially web extensions. You will receive training to detect malicious behaviours, perform security assessments and help automate the analysis workflow.

Key responsibilities

• Perform static and dynamic analysis of browser extensions to uncover malicious behaviour and security issues.
• Reverse engineer and debug JavaScript, including obfuscated code.
• Document and report vulnerabilities with root‑cause analysis and remediation recommendations.
• Assist in investigations and takedowns of malicious extensions.
• Conduct code reviews aligned with secure coding standards.
• Design detection rules and security patterns for large‑scale monitoring.
• Monitor emerging threat trends and share findings with the team.
• Propose improvements, contribute ideas and support automation of existing processes.
• Provide technical guidance and maintain clear documentation.

Required profile

• Strong hands‑on experience with JavaScript, including closures, prototypes, scope, hoisting, callbacks and OOP.
• Solid knowledge of HTML, CSS, JSON, AJAX and modern ES6/ES7 standards.
• Good understanding of Node.js and Webpack.
• Experience with front‑end frameworks or libraries such as React, Angular or jQuery.
• Excellent code analysis, debugging and reverse‑engineering skills for JavaScript applications.
• Effective communication and ability to work collaboratively in a team.

Required skills

• JavaScript (advanced)
• HTML
• CSS
• JSON
• AJAX
• ES6 / ES7
• Node.js
• Webpack
• React
• Angular
• jQuery
• Static analysis
• Dynamic analysis
• Reverse engineering (JavaScript)
• Debugging
• Code analysis