AOUSC - Malware Analyst

cFocus Software Incorporated; Washington; Hybrid; USD 110,000 - 150,000; Full time

Job summary

cFocus Software seeks a Malware Analyst to join our program supporting the Administrative Office of the United States Courts (AOUSC). The position is Hybrid with the onsite location in Washington, DC.

A Public Trust clearance is required for employment. Ideal candidates will have 3+ years of malware reverse engineering and behavior analysis, deep Windows internals knowledge, and hands-on experience with tools like IDA Pro, Ghidra, OllyDbg, x64dbg, or Cuckoo Sandbox.

Qualifications

• Active Public Trust clearance.
• B.S. Computer Science, Information Technology, or a related field.
• 3+ years of experience in reverse engineering malware and malware behavior analysis.
• Deep understanding of Windows internals, PE file structures, process injection and obfuscation techniques.
• 3+ years of hands-on experience with reverse engineering tools (IDA Pro, Ghidra, OllyDbg, x64dbg or Cuckoo Sandbox).
• Experience creating YARA rules and performing malware classification at scale.
• Familiarity with malware persistence methods, anti-VM techniques and evasive payloads.

Skills

Reverse engineering

Malware analysis

Windows internals

Malware classification

Education

B.S. Computer Science/Information Technology or related field

Tools

IDA Pro

Ghidra

OllyDbg

x64dbg

Cuckoo Sandbox

Job description

cFocus Software seeks a Malware Analyst to join our program supporting the Administrative Office of the United States Courts (AOUSC). This position is Hybrid with the onsite location being in Washington, DC. This position requires a Public Trust clearance.

Qualifications:

• Active Public Trust clearance
• B.S. Computer Science, Information Technology, or a related field
• 3+ years of experience in reverse engineering malware and malware behavior analysis.
• Deep understanding of windows internals, PE file structures, process injection and obfuscation techniques.
• 3+ years of hands-on experience with reverse engineering tools (IDA Pro, Ghidra, OllyDbg, x64dbg or Cuckoo Sandbox).
• Experience creating YARA rules and performing malware classification at scale.
• Familiarity with malware persistence methods, anti-VM techniques and evasive payloads.