Malware Analyst

LTM Limited; Pune District, Hyderabad; On-site; INR 1,200,000 - 1,800,000; Full time

Job summary

LTM Limited is seeking a Malware Analyst/Reverse Engineer to perform static and dynamic malware analysis, write malware signatures, and investigate phishing campaigns and threat campaigns. The role requires hands-on experience with IDA Pro/OllyDbg, understanding of PE and non-PE file formats, and knowledge of malware techniques.

The candidate should be proficient in threat intelligence, malware analysis workflows, and have strong analytical and reporting abilities to produce detection content

Qualifications

• Experience with static and dynamic malware analysis including file structures (PE, PDF, OLE, Windows shortcuts).
• Hands-on experience writing signatures for malware samples (initial vectors).
• Awareness of trending malware campaigns and threat write-ups.
• Experience with email security and endpoint security (EOP).
• Investigating phishing campaigns and spam emails reported by users.
• Threat intelligence analysis/threat hunting.
• Analyzing PE files (static/dynamic) and providing detections for malicious PE files.
• Analyzing non-PE files (OLE/PDF/HTML/JS/VBS/JAR/LNK) for detections.
• Malware analysis and reversing; familiarity with debuggers, disassemblers and sandboxes.
• Knowledge of malware kill chain, MITRE ATT&CK techniques, AV evasion, and pentesting tools.

Skills

Malware analysis

Reverse engineering

Static analysis

Dynamic analysis

PE/Non-PE file analysis

Threat hunting

MITRE ATT&CK

AV evasion techniques

Malware signature writing

Debugging

Tools

IDA Pro

OllyDbg

Job description

For Malware + RE:

Here are the some of the key skills which we are looking for it:

• Static and dynamic malware analysis(aware of file structure like, PE, PDF, OLE, windows short cut files etc...)
• someone who has hands on writing signatures for malware samples(at-least initial vector malware).
• Aware of trending malware family campaign and analysis for threat write ups for that follow up family. (example malware family - Emotet/Qakbot/AgentTesla etc..)
• Email security and Endpoint Security (EOP)
• Investigating the Phishing campaign and spam emails which users have received and reported.
• Threat Intelligence analysis/ Threat hunting
• Analyzing PE files (Dynamic and static analysis) and providing detection for malicious PE files.(RE/Malware Analysis)
• Analyzing non-PE files (like OLE / PDF / HTML / HTA / VBS|VBE /JS/ WSF/JAR/LNK) andproviding detection for malicious files.
• Malware Analysis and Reversing.
• Reverse Engineering skills: familiar with debuggers, disassemblers, network protocols, file formats, sandboxes, hardware/firmware internals, software communication mechanisms, Classification, clustering and labelling of Malware.
• Knowledge of Advanced Techniques of Malware Analysis.
• Knowledge of Malware kill chain and MITRE ATT&CK techniques and tactics.
• Knowledge of AV evasion techniques and Pen testing tools like - Veil (equal rank), PowerShell Empire, Meterpreter, Unicorn, Cactus Torch, and Any other similar tools
• Additionally, Experience with advanced persistent threats, human adversary compromises and incident response.
• Excellent cross-group and interpersonal skills, with the ability to articulate business need for detection improvements.
• Excellent analytical skills and ability to identify patterns and trends.
• Strong research skills, data knowledge, and ability to analyze and present complex data in a meaningful way.
• Strong understanding of Cyber Security, modern security problems and threat landscape, Operating Systems (internals), computer networking concepts.

Required Skills:

• Olly DBG, IDA PRO, Static and dynamic malware analysis, PE and non-PE file analysis