This Job Vacancy has Expired!

Lead Reverse Engineering and Malware Analyst

Posted on Sep 18, 2019 by Request Technology - Craig Johnson

Charlotte, NC 28201
IT
Immediate Start
$100k - $130k Annual
Full-Time

Prestigious Fortune 500 Company is currently seeking a Lead Reverse Engineering and Malware Analyst. Candidate will perform malware analysis and reverse engineering in support of incident response, investigative analysis, threat hunting, and research on existing and emerging cyber threats. The role will involve in-depth analysis of static and behavioral analysis of complex malicious code utilizing various tools, including disassemblers, debuggers, hex editors, un-packers, virtual machines, and network sniffers. The candidate will perform the functions of malware analyst/reverse engineer and serve as a liaison for Threat Services, and mentor and collaborate with the threat hunting, incident handling/response, and forensics teams.

Responsibilities:

Use expertise in malware analysis/reverse engineering to evaluate and analyze complex malicious code.
Perform reverse-engineering for suspected or known malware files, determining the TTPs associated with the code.
Develop custom tools designed to automate analysis.
Perform research around malicious software, vulnerabilities, and exploitation tactics, and recommend preventative or defensive actions.
Produce detailed reports identifying attributes and functionality of malware, and IOCs that can be used for malware identification/detection, to include behavior, identified infrastructure used for command and control, and mitigation techniques.
Assist in identifying (hunting) and profiling threat actors and TTPs.
Develop host and network based signatures to identify specific malware via heuristic and/or anomaly based detection methods.
Participate in formal technical briefing and proposals.
Perform as an Information Security SME in the several of the following areas:
Malicius code behavior
Threat Intelligence
Incident Respnse
Web Applicatin
Lg analysis (statistical modelling, correlation, pattern recognition, etc.)
Micrsoft platform (Server, Workstation, applications)
Key Responsibilities (Cont d)
Open Systems platfrms (Linux, UNIX, VM Ware ESX)
Networking (Firewalls, IDS/IPS, packet capture)
Databases (Oracle, SQL Server, DB2, IMS)
and others.

Providing mentorship and support to teammates regarding malicious file analysis/behavior, communication/rapport with other divisions and various levels of leadership, technical expertise, and career development.
Capable of identifying need & driving solutions, and providing guidance, in an autonomous manner.

Qualifications:

Bachelors and/or Masters Degree in Engineering, Computers Science, or related field
7+ years overall technical experience in either reverse engineering/malware analysis, threat intelligence, incident response, security operations, or related information security field.
5+ years experience in application design/engineering, including but not limited to programming/Scripting, Windows/Linux system administration, RDBMS/NoSQL database administration, etc.
2+ years experience in penetration testing, ethical hacking, exploit writing, and vulnerability management
Advanced experience with reverse engineering tools like IDA Pro, Ghidra, OllyDbg, Windbg, and Wireshark.
Strong knowledge of Python Scripting to automate analysis and reverse engineering tasks.
Ability to reverse engineer binaries of various types including: x86, x64, C, C++, and .NET.
Deep understanding of x86, ARM, and x64 architectures.
Strong understanding of Windows Operating System Internals, Windows APIs, and writing and analysing DLLs.
Strong experience with programming languages (Python, Bash, PowerShell, Perl, C/C++).
Recent experience developing custom software and hardware tools to assist in performing reverse engineering and vulnerability analysis.
Deep understanding of common network and application stack protocols, including but not limited to TCP/IP, SMTP, DNS, TLS, XML, HTTP, etc.
Advanced experience with security operations tools, including but not limited to:
SIEM (eg Splunk, ArcSight)
Indicatr management (eg ThreatConnect)
Link/relatinship analysis (eg Maltego, IBM i2 Analyst Notebook)
Signature develpment/management (eg Snort rules, Yara rules)
Broad experience with various common security infrastructure tools (NIDS, HIPS, EDR, etc.)
Excellent analytical and problem solving skills, a passion for research and puzzle-solving.
Expert understanding of large, complex corporate network environments.
Strong communication (oral, written, presentation), interpersonal and consultative skills, especially in regard to white papers, briefs, and presentations.
Good organization and documentation skills.
Leadership and mentorship skills.

Preferred Skills:

At least hobbyist experience in maker/hardware hacking, eg Raspberry Pi, Arduino, etc.
Familiarity with Linux OS and mobile iOS/Android forensics.
Experience in cryptography or cryptanalysis.
Experience with incident response workflow (or other case management ticketing ) tools such as RSA Archer, ServiceNow, Remedy, JIRA, Resilient, Best Practical Request Tracker, etc.
Obtained certifications in several of the following: SANS GIAC courses, GREM, CEH, CISSP, OSCP, or tool-specific certifications

Reference: 758368767

Set up alerts to get notified of new vacancies.