Who are we?Want to reverse engineer mobile malware, build threat intelligence extraction pipelines, and help protect millions of banking customers from cybercrime?We help the world's leading banks stay ahead of fraudsters, scammers, and cybercriminals. Our technology protects millions of users every day by detecting fraud, malware, and emerging attack techniques before damage is done. We do this by combining 15 years of extensive research with our own smart software.At ThreatFabric, we're not just shaping the future of cybersecurity, we're defining it. With our headquarters in the vibrant city of Amsterdam, ThreatFabric stands at the forefront of combating online fraud, mobile malware, and threat intelligence.Your missionPosition: Full-time | 40 hours per weekLocation: Amsterdam, Netherlands | Hybrid (2–3 days office)Salary Range: between 70.000,- and 90.000,- annuallyAbout The JobAs a Threat Research Engineer at ThreatFabric, you combine reverse engineering and software development skills to research threats identified by our Threat Analysts and automate threat intelligence extraction. Your mission is to transform raw malware samples into structured and actionable threat intelligence by creating, maintaining, and improving the tooling and analysis pipelines that power ThreatFabric's threat intelligence capabilities.You will play a key role in developing deobfuscation tooling, config extractors, unpackers, and scalable analysis pipelines. Working closely with Threat Analysts within the MTI team, you will help automate intelligence extraction processes, improve analysis workflows, and ensure ThreatFabric continues to scale its threat intelligence operations.You will work on a combination of reverse engineering, malware analysis, research, automation, monitoring, and software development, helping ThreatFabric stay ahead of emerging threats and provide high-quality threat intelligence to customers around the world.Your key responsibilities will include:Performing reverse engineering of various threats, with a focus on mobile malware.Identifying reliable ways to automate threat intelligence extraction from malware samples.Supporting Threat Analysts in their research and investigation of threats.Creating deobfuscation modules, configuration extractors, and unpackers based on your own reverse engineering efforts or requests from Threat Analysts.Designing, building, and maintaining reliable and scalable analysis pipelines.Combining static analysis, dynamic analysis, and AI-powered assessments within analysis workflows.Developing and maintaining threat intelligence sharing tools to support ThreatFabric customers.Documenting and standardising existing and newly developed tooling to ensure maintainability by the wider team.Monitoring the performance and reliability of analysis pipelines.Identifying and communicating opportunities to improve analysis tooling and infrastructure.Performing traffic analysis as part of malware investigations.Using scripting techniques to perform decryption during malware analysis.Analysing simple native code when required.Contributing to the continuous improvement and scaling of ThreatFabric's threat intelligence extraction capabilities.What We OfferA 12-month employment contract with the intention to extend. Subject to mutual satisfaction, this may lead to a permanent position.A competitive salary that reflects your skills and experience with a salary range between 70.000,- to 90.000,- annually.25 holidays per year.8% holiday allowance (included in annual salary).A Pension Scheme.A stimulating and supportive work environment that encourages growth and development.An annual personal Growth and Development budget.The opportunity to make a meaningful impact in a rapidly growing tech company.Flexible Remote / Hybrid work-from-home options to promote work-life balance.Flexible working hours.Active ThreatFabric events and FitFabric bootcamps.Active knowledge-sharing huddles.Who are we looking for?Skills & CompetenciesTechnical Skills 5-8 years of relevant experience in a similar role. Strong software engineering skills and the ability to write clean, tested, and maintainable code. Ability to create, maintain, and improve services and analysis pipelines.Practical reverse engineering experience with real malwareAbility to identify and defeat obfuscation and encryption schemes Experience analysing communication protocols Experience establishing and maintaining scalable analysis services. Ability to reverse engineer most malware analysis cases independently. Experience performing traffic analysis. Experience using scripting to support malware analysis and decryption activities. Ability to analyse simple native code. Fluency in English, both written and spoken.Analytical SkillsAbility to translate ad-hoc analyst workflows into robust and generalised automation.Ability to identify patterns in malicious code and automate data extraction.Strong analytical and problem-solving capabilities.Ability to identify opportunities for automation and process improvement.Ability to connect technical findings to actionable threat intelligence.Learning Ability & Eagerness to LearnContinuously develops expertise in reverse engineering, malware analysis, and threat intelligence extraction.Actively contributes to improving and scaling threat intelligence extraction pipelines.Keeps up to date with developments in malware analysis, reverse engineering, and cyber threats.Demonstrates curiosity and a strong desire to continuously expand technical knowledge and expertise.Communication & DocumentationGood writing skills and ability to create clear and understandable documentation.Able to document existing and newly developed tooling in a structured and maintainable manner.Able to communicate technical findings clearly and effectively.Shares knowledge and collaborates effectively with colleagues.Continuous Improvement Continuously seeks opportunities to improve tooling, services, and analysis workflows. Thinks before acting and takes ownership of deliverables and outcomes. Strives for cutting-edge solutions and continuous technical excellence Actively contributes to improving ThreatFabric's threat intelligence extraction capabilities.Information Security, Business Continuity & Privacy Adheres to company security, continuity, and privacy standards. Acts as a role model in secure research practices and data compliance. Proactively reports and supports resolution of security incidents.Why us?Protecting people, not just systemsAt ThreatFabric, your work has a direct impact on the lives of millions of people. Every day, fraudsters, scammers, and cybercriminals target individuals and financial institutions around the world. The technology we build helps stop these attacks before they cause harm, protecting not only money, but also trust, confidence, and peace of mind.Unlike many technology companies, the problems we solve are real, complex, and constantly evolving. You'll work on challenges that make a measurable difference and see your contributions translated into solutions used by some of the world's leading financial institutions.Work Alongside Experts Who Love What They DoThreatFabric brings together security researchers, engineers, data scientists, threat intelligence specialists, and fraud experts from around the globe. We're passionate about our craft and continuously challenge each other to think differently, improve our solutions, and stay ahead of emerging threats.Learning is part of our DNA. Whether through knowledge-sharing sessions, technical discussions, mentoring, or simply collaborating with highly experienced colleagues, you'll be surrounded by people who are eager to learn and equally eager to share their expertise.Why people stayPeople join ThreatFabric because they're excited by the technology and the mission. They stay because of the people. We celebrate successes together, learn from challenges together, and create an environment where talented indi