Malware AnalystNew

Talent Web Recruitment; Sydney; On-site; AUD 120,000 - 170,000; Full time

Benefits offered by this job

4-day work week

Sydney CBD location

Job summary

Talent Web Recruitment is sourcing a Malware Analyst for a world‑leading financial institution in Sydney. This on‑site role focuses on malware delivery and execution, with real‑time threat responses and cross‑team collaboration.

You will conduct static and dynamic malware analysis, document findings in detailed reports, and help strengthen controls and detection methods across Email, Web, and Endpoint domains.

Qualifications

• Experience in malware analysis and incident response.
• Ability to triage detections and prioritise threats.
• Experience with static and dynamic analysis of malware.
• Familiarity with email, web, or endpoint threat prevention.

Responsibilities

• Respond to threats and triage in real time, focusing on malware delivery and execution.
• Perform static, dynamic, and behavioural analysis of malware and IoCs.
• Document findings and produce reports with observations, actions, and recommendations.
• Collaborate with response teams to improve controls and detection mechanisms.

Skills

Malware analysis

Incident response

Triaging detections

EDR tools

SIEM

Wireshark

Fiddler

Forensic artifacts

Tools

Process Monitor

FakeDNS

Regshot

Sandbox technologies

Job description

• Initial 12-month contract
• Sydney CBD location
• 4-day work week

Your role

A world leading financial institution is hiring aMalware Analyst to join their global Malware Defense Team.

What you'll do

• Respond, triage, and adapt to real-time threats targeting the organisation through the lens of malware delivery and execution.
• Perform static, dynamic, and behavioural analysis of malicious software and potential indicators of compromise.
• Maintain detailed documentation regarding analysis findings and producing comprehensive reports encompassing observations, actions taken, and recommendations.
• Identify cyber risks and help develop improvements to controls and detection mechanisms.
• Collaborate with response teams to defend against emerging threats and contribute to Incident Response efforts.

Who you are

• Malware analysis and incident response experience.
• Specific experience with triaging detections, prioritising threats, performing static and dynamic analysis, identifying security gaps, and implementing preventative measures.
• Strong investigative mindset with an ability to drive process changes and implement control enhancements.
• Experience in one or more threat prevention disciplines focusing on Email, Web, or Endpoint.

Your skills

• Understanding of browser exploitation techniques.
• Familiarity of web based technologies such as Javascript or HTML and how they are commonly abused by various threat actors or techniques.
• Experience with reviewing and analysing Email Headers.
• Experience with detecting phishing and other common email threats.
• SIEM experience with event correlation and searching.
• Experience with dynamic analysis tools such as Process Monitor, FakeDNS, Regshot, or Wireshark.
• Familiarity with use and interpretation of malware analysis results from sandbox technologies.
• Technical experience and ability to operate and maintain a virtualised sandbox environment.
• Familiarity with URL categorisation and analysis tools like Fiddler, commercial sandbox, or web proxy technologies.
• Ability to assess files or URLs and extract IoCs such as malicious domains, IPs, and file hashes.
• Experience with documentation and ability to clearly articulate thoughts to a wide variety of intended audiences.
• Knowledge of EDR tools
• Knowledge of forensic artifacts such as Browser, Registry, or Event Log artifacts.

Other requirements

• Permanent Resident or an Australian citizen
• Training period: 1–2 months, Monday–Friday
• Post training roster: Wednesday to Sunday or Saturday to Wednesday