Working as a malware analyst in the PT Multiscanner project. Unpacking and analyzing malware in order to find out why the malware is not detected by the sandbox. Writing YARA signatures both for the sandbox and for getting malware samples from VirusTotal. Helping to sort out various problems with AV engines in PT Multiscanner. Writing small tools in C.

Working as a malware analyst in the Packers Group / Heuristics Group. Writing unpackers, parsers and detections in C (for AV bases -- i.e. for all the users of Kaspersky engine worldwide -- so my code had to be portable, fast, stable, non-exploitable). Analyzing / reverse-engineering various malware (mostly for Win32 PE files, but also Java, Flash, OLE, etc.). My signatures detected new Adobe Flash exploits three times: CVE-2013-0633, CVE-2014-0497, CVE-2014-0515. Tools used: IDA (with and without Hex-Rays), Hiew, OllyDbg, JAD, JD-GUI, FFDec, RABCDAsm, etc.

See above.