Cybersecurity Research Intern – Offensive Security & ClamAV Evasion

About the role

Yalen Sky, a local‑first antivirus, relies on ClamAV as its core engine. Because ClamAV signatures are public, attackers frequently craft modified malware to bypass detection. As a Cybersecurity Research Intern you will identify leading ClamAV evasion techniques and develop heuristic rules to keep Yalen Sky users protected.

Key responsibilities

• Map current evasion strategies such as packing, obfuscation, anti‑sandbox and timing attacks.
• Build a secure, isolated sandbox environment (VMs) and benchmark evasion techniques against Yalen Sky's detection engine.
• Write custom heuristic detection rules in Python or Rust to counter identified evasion methods.
• Package and integrate the custom rules into the Yalen Pulse Config API for production deployment across endpoints.

Required profile

• Solid background in Python with working knowledge of Rust or C.
• Familiarity with PE/ELF file formats and virtualized environments (VMs).
• Strong interest in offensive security, malware analysis and reverse engineering.

Required skills

• Python
• Rust
• C
• PE/ELF file format analysis
• Virtualized environments (VMs)