Cybersecurity Research Intern – Offensive Security & ClamAV Evasion

About Yalen: Yalen is a RegTech/CyberTech startup developing 100% local, privacy-first cybersecurity software for regulated professionals. Our ecosystem includes Yalen Cura (EU AI Act & GDPR compliance for European legal and medical practitioners) and Yalen Sky (a local-first antivirus tailored for emerging markets).
Target Level: Master’s Student (M1/M2) in Cybersecurity or Computer Science Engineering
Job Overview: Yalen Sky uses ClamAV as its primary core antivirus engine, paired with a curated hash database. Because ClamAV signatures are public, attackers frequently craft modified malware variants to evade standard detection. Your mission will be to identify top ClamAV evasion techniques and build complementary, heuristic rules to keep Yalen Sky users protected.
Key Responsibilities:
Map Evasion Techniques: Analyze current evasion strategies (packing, obfuscation, anti-sandbox, timing attacks, etc.).
Offensive Lab Testing: Build a secure, isolated sandbox environment (VMs) and benchmark evasion techniques against Yalen Sky's detection engine.
Develop Heuristics: Write complementary, custom heuristic detection rules in Python or Rust to counter identified evasion methods.
Production Deployment: Package and integrate your custom rules into the Yalen Pulse Config API for production deployment across endpoints.
Qualifications:
Solid background in Python, with working knowledge of Rust or C.
Familiarity with PE/ELF file formats and virtualized environments (VMs).
Strong interest in offensive security, malware analysis, and reverse engineering.

Work arrangement
Yes