Threat Research Software Engineer

About the role

ESET is looking for a Threat Research Software Engineer to support its global research team. You will not be reversing malware yourself; instead you will build the tools and automation that enable researchers to work faster and more efficiently.

Key responsibilities

• Design, develop, and maintain internal tools that unify sample metadata from telemetry, sandbox, malware repositories and threat‑intelligence platforms.
• Create automated pipelines that push analysis results into TI platforms (e.g., MISP) and generate customer‑facing deliverables such as IOC tables and report skeletons.
• Build researcher‑facing web applications for sample lookup, triage, analysis tracking and tagging.
• Own the tooling backlog in partnership with researchers and collaborate with upstream engineering teams.
• Identify and resolve reliability, performance and correctness issues before they become incidents; improve runbooks, dashboards, alerting and automation.

Required profile

• Strong experience in Python and JavaScript, with production‑grade code and operational accountability.
• Proven ability to design, implement and maintain APIs, databases, message queues and data integration pipelines.
• Familiarity with threat‑intelligence workflows and sample metadata (hashes, file types, packers, strings, imports).
• Experience building web applications and using container technologies such as Docker.
• Hands‑on knowledge of CI/CD, Git, test automation and secure coding practices.
• Excellent collaboration and problem‑solving skills to turn pain points into shipped tooling.

Required skills

• Python
• JavaScript
• API development
• Database design and query optimization
• Message queue integration
• Web application development
• Docker (containerisation)
• CI/CD pipelines
• Git version control
• Test automation
• Secure coding practices