Malware AnalystJust posted!

Talent Web Recruitment; Sydney; On-site; AUD 120,000 - 170,000; Full time

Benefits offered by this job

Initial 12-month contract

Sydney CBD location

4-day work week

Job summary

Talent Web Recruitment is sourcing a Malware Analyst for a world-leading financial institution based in Sydney CBD. You will join the global Malware Defense Team to monitor threats and respond to malware delivery and execution in real time.

In this hands-on role you will perform static, dynamic, and behavioral analysis, document findings, and produce comprehensive reports with observations, actions taken, and recommendations.

Qualifications

• Malware analysis and incident response experience.
• Experience triaging detections, prioritising threats, performing static and dynamic analysis, identifying security gaps, and implementing preventative measures.
• Ability to document findings and produce comprehensive reports with observations, actions taken and recommendations.

Responsibilities

• Respond, triage, and adapt to real-time threats targeting the organisation through malware delivery and execution.
• Perform static, dynamic, and behavioral analysis of malicious software and potential indicators of compromise.
• Maintain detailed documentation regarding analysis findings and producing comprehensive reports encompassing observations, actions taken, and recommendations.
• Identify cyber risks and help develop improvements to controls and detection mechanisms.
• Collaborate with response teams to defend against emerging threats and contribute to Incident Response efforts.

Skills

Malware analysis

Incident response

Threat hunting

Documentation

Communication

Tools

Process Monitor

Wireshark

Fiddler

Sandbox

EDR tools

Job description

• Initial 12-month contract
• Sydney CBD location
• 4-day work week

Your role

A world leading financial institution is hiring aMalware Analyst to join their global Malware Defense Team.

What you'll do

• Respond, triage, and adapt to real-time threats targeting the organisation through the lens of malware delivery and execution.
• Perform static, dynamic, and behavioral analysis of malicious software and potential indicators of compromise.
• Maintain detailed documentation regarding analysis findings and producing comprehensive reports encompassing observations, actions taken, and recommendations.
• Identify cyber risks and help develop improvements to controls and detection mechanisms.
• Collaborate with response teams to defend against emerging threats and contribute to Incident Response efforts.

Who you are

• Malware analysis and incident response experience.
• Specific experience with triaging detections, prioritising threats, performing static and dynamic analysis, identifying security gaps, and implementing preventative measures.
• Strong investigative mindset with an ability to drive process changes and implement control enhancements.
• Experience in one or more threat prevention disciplines focusing on Email, Web, or Endpoint.

Your skills

• Understanding of browser exploitation techniques.
• Familiarity of web based technologies such as Javascript or HTML and how they are commonly abused by various threat actors or techniques.
• Experience with reviewing and analysing Email Headers.
• Experience with detecting phishing and other common email threats.
• SIEM experience with event correlation and searching.
• Experience with dynamic analysis tools such as Process Monitor, FakeDNS, Regshot, or Wireshark.
• Familiarity with use and interpretation of malware analysis results from sandbox technologies.
• Technical experience and ability to operate and maintain a virtualised sandbox environment.
• Familiarity with URL categorisation and analysis tools like Fiddler, commercial sandbox, or web proxy technologies.
• Ability to assess files or URLs and extract IoCs such as malicious domains, IPs, and file hashes.
• Experience with documentation and ability to clearly articulate thoughts to a wide variety of intended audiences.
• Knowledge of EDR tools
• Knowledge of forensic artifacts such as Browser, Registry, or Event Log artifacts.

Other requirements

• Permanent Resident or an Australian citizen
• Training period: 1–2 months, Monday–Friday
• Post training roster:Wednesday to Sundayor Saturday to Wednesday