Web Security Malware Analyst (Hybrid – Lisbon)
English Required / Based in Lisbon, Portugal / Hybrid
We are seeking a Front End/ Web Engineer with a strong foundation in web technologies who is eager to develop expertise in cybersecurity. This role focuses on analyzing, reverse engineering, and securing browser-based applications, with particular emphasis on web extensions. You will be trained to identify malicious behaviors, conduct security assessments, and contribute to automation and process improvements throughout the security analysis lifecycle.
Key Responsibilities:
Perform analysis of web browser extensions using static and dynamic methods to identify malicious behavior and security issues.
Reverse engineer and debug JavaScript to understand complex or obfuscated code.
Detect, document, and report security vulnerabilities, including root cause analysis and remediation recommendations.
Assist in the investigation and takedown of malicious browser extensions.
Carry out regular code reviews and provide feedback aligned with secure coding standards.
Review and inspect JavaScript code to identify suspicious or malicious activity, performing reverse engineering when required.
Design and implement detection rules and security patterns to identify violations at scale.
Monitor emerging threat trends and share findings to strengthen detection capabilities across the team.
Propose improvements, contribute innovative ideas, and support the automation of existing processes.
Serve as a technical reference point, offering guidance, clarification, and technical support to team members.
Work closely with cross-functional teams while maintaining clear and accurate technical documentation.
Support the continuous enhancement of security workflows and tooling.
You are someone who brings:
Strong hands‑on experience with JavaScript, including advanced concepts such as closures, prototypes, variable scope, hoisting, callbacks, and OOP principles.
Required hands‑on experience with HTML and CSS.
Required knowledge of JSON, AJAX, and ES6/ES7 standards.
Good understanding of Node.js and Webpack.
Experience working with front‑end frameworks or libraries such as React, Angular, or jQuery.
Strong code analysis, debugging, and reverse engineering skills, particularly in JavaScript applications.
Ability to analyze JavaScript code and identify malicious activities effectively.
Good communication skills and the ability to work as a collaborative team player.
Added Advantages (Nice to Have):
Cybersecurity experience or strong security knowledge.
Familiarity with DAST and SAST methodologies.
Knowledge of cybersecurity open‑source tools such as Burp Suite, Nmap, or similar tools.
Understanding of obfuscation and de‑obfuscation techniques.
Experience writing technical and security assessment reports.
关于高知特 (Cognizant)
高知特(Cognizant)（纳斯达克代码：CTSH）作为一家AI Builder和相关技术服务提供商，致力于通过打造全栈AI解决方案，帮助企业将人工智能投资转化为实际价值。公司凭借深厚的行业经验、流程优化和工程技术专长，将企业独特的业务场景融入科技系统，赋能组织释放人才潜能，推动切实成果，并帮助全球企业在瞬息万变的环境中保持领先。如需了解更多详情，敬请访问 cognizant.ai 或关注@cognizant。
补充雇佣信息
薪酬信息截至本职位发布之日为准。Cognizant 保留在适用法律允许的范围内随时修改该信息的权利。
申请人可能需要通过现场面试或视频会议的方式参加面试。此外，候选人在每次面试时可能需要出示其当前所在州或政府签发的有效身份证件。
Cognizant 是一家提供平等就业机会的雇主。在招聘过程中，您的申请和候选资格不会因种族、肤色、性别、宗教、信仰、性取向、性别认同、国籍、残疾、遗传信息、怀孕、退伍军人身份或任何其他受联邦、州或地方法律保护的特征而受到影响。
