Senior Python Developer | Remot

An innovative cybersecurity startup developing AI-driven technology is looking for a highly experienced and technically profound Senior Python
Developer which specializes in DFIR and Treat Research to be a core contributor to our flagship security product.
This product is dedicated to protecting enterprise data by analyzing storage snapshots to proactively detect ransomware, malware, and other sophisticated threats before data is restored.
The ideal candidate will have extensive Python development expertise coupled with direct experience in file system analysis, data parsing and forensics, threat detection and research within a cyber security context.
Core Feature Development: Lead the design and implementation of highly performant software for accessing, parsing, and analyzing large-scale storage snapshot data (e.g., block data, file system metadata).
Threat Detection Logic: Develop, optimize, and maintain complex logic and algorithms for identifying malicious patterns, including ransomware encryption artifacts, known malware signatures, and indicators of compromise (IOCs) using Yara rules and other technics.
Data Ingestion and Processing: Build robust, scalable services to efficiently ingest and process massive volumes of data from various storage platforms (e.g., NetApp, Dell EMC, Pure Storage, cloud storage APIs).
Performance Optimization: Focus heavily on optimizing code and data
structures for speed, as snapshot analysis is a time-critical operation on large data sets.
Integration & APIs: Design and implement secure APIs for integrating our detection engine with SIEM/SOAR platforms, alerting systems, and cloud environments (AWS, Azure, GCP).
Mentorship and Standards: Conduct code reviews, ensure adherence to
secure coding standards, and mentor junior developers on system-level
programming and security best practices.
דרישות התפקיד:
Experience: 5+ years of professional software development experience with a strong focus on building data-intensive applications using Python for windows
and linux OS systems.
Cyber Security Focus: 3+ years of experience in the cyber security domain, ideally in areas like Malware\Ransomware analysis, forensics, EDR/XDR, or threat research and hunting.
Low-Level Data Handling: Proven experience with file system structures
(e.g., NTFS, ext4), block storage, and direct data parsing/manipulation in Python or other languages and tools.
Scalable Architecture: Expertise in building high-throughput, low-latency multi- threading applications, including experience with distributed systems and message queues (e.g., Kafka, RabbitMQ).
Threat Knowledge: Strong working knowledge of common malware techniques, ransomware infection lifecycles, and how these activities manifest on disk/in file systems.
Databases: Experience with both relational and scalable NoSQL/Search
databases (e.g., PostgreSQL,Mongodb, Elasticsearch/OpenSearch).
Bachelor’s or Master’s degree in computer science, Engineering, or
a related technical field (or equivalent practical experience).

Highly Desired Skills (Big Pluses)
Experience working with React and UI frameworks.
Experience in AI, ML and anomaly detection model integration in production.
Experience with forensic tools or libraries (e.g., Sleuth Kit, volatility).
Familiarity with vendor-specific storage APIs or protocols.
Knowledge of data lineage tracking and integrity checking.