Cyber Security - Malware Reverse Engineer Analyst

Deutsche Bank; Jacksonville (FL); Hybrid; USD 78,000 - 121,000; Full time

Benefits offered by this job

Hybrid work model

Generous vacation

Personal & volunteer days

Retirement savings plan

Wellbeing benefits

Educational resources & matching gifts

Job summary

Deutsche Bank is seeking an experienced Malware Analyst for its ISTO ATR team in Jacksonville. The role requires hands-on malware analysis, reverse engineering, and incident response across Windows and Linux environments. You will craft actionable findings and help drive containment and remediation during active incidents.

teamwork is essential as you’ll automate analysis workflows, build tools, and contribute to threat intelligence. A hybrid work model and strong benefit packages are offered.

Qualifications

• In-depth static and dynamic malware analysis experience in an enterprise.
• Hands-on with IDA Pro, Ghidra, x64dbg and sandboxes.
• Proficiency in Python or PowerShell for automation.
• Strong OS internals knowledge in Windows and Linux; memory management and network protocols.
• Bachelor’s degree or equivalent; certifications preferred: GREM, OSCP, OSCE.

Responsibilities

• Conduct in-depth malware analysis during active security incidents, including ransomware and advanced threats.
• Perform static and dynamic analysis, reverse engineering, and behavioral analysis across Windows, Linux, macOS.
• Provide technical expertise during incidents to identify TTPs, containment, and remediation efforts; contribute to threat intelligence reports.
• Develop and improve detection signatures (e.g., YARA rules) and automation to mature the malware analysis capabilities.

Skills

Malware analysis

Reverse engineering

Behavioral analysis

IDA Pro

Ghidra

x64dbg

Malware sandboxes

Wireshark

Process Monitor

Python

PowerShell

Windows internals

Linux internals

AI tooling

Education

Bachelor's degree in CS or InfoSec

GIAC Reverse Engineering Malware (GREM)

OSCP or OSCE

Tools

IDA Pro

Ghidra

x64dbg

Malware sandboxes

Wireshark

Process Monitor

Job description

Overview

At Deutsche Bank, our defense is as sophisticated as the threats we face. The Information Security Threat Operations (ISTO) team is the front line, defending a global enterprise against thousands of daily intrusion attempts. You will be joining the Advanced Threat Response (ATR) group, an elite unit of specialists in digital forensics, malware analysis, and threat hunting. As a Malware Analyst for Malware Analysis and Incident Response, you will play a crucial role in understanding the malicious software impacting our organization during active incidents. This is a hands-on technical role where you will support the in-depth analysis of malware samples, from various threat actors and targeted attacks, to contribute to real-time incident response efforts.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration
• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
• Educational resources, matching gift and volunteer programs

What You’ll Do

• Conduct in-depth analysis of malware involved in active security incidents, including ransomware, targeted attacks, and advanced persistent threats
• Execute static and dynamic analysis, reverse engineering, and behavioral analysis of sophisticated malware samples across various operating systems (Windows, Linux, macOS)
• Serve as a technical expert during critical security incidents, leveraging malware analysis findings to identify threat actor TTPs, develop containment strategies, and support rapid eradication and remediation efforts
• Articulate basic technical findings from malware analysis into clear and concise documentation, contributing to internal threat intelligence reports for technical peers and supporting broader incident communication
• Enhance and mature the team’s malware analysis capabilities by developing new analytical techniques, automating analysis workflows, creating custom tools, and improving detection signatures (e.g., YARA rules)

Skills You’ll Need

• Proven experience conducting in-depth static and dynamic malware analysis, reverse engineering, and behavioral analysis of sophisticated threats in an enterprise environment
• Hands-on expertise with industry-standard malware analysis tools (e.g., IDA Pro, Ghidra, x64dbg, malware sandboxes, Wireshark, Process Monitor) and methodologies for understanding malicious code
• Proficiency in at least one scripting language (e.g., Python, PowerShell) for automating malware analysis tasks, extracting artifacts, and developing custom analysis tools
• Deep understanding of Windows and Linux operating system internals, memory management, process execution, and network protocols relevant to malware behavior
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs

Skills That Will Help You Excel

• Proven experience with advanced reverse engineering techniques, including obfuscation bypass, anti-analysis trick identification, and unpacking complex malware
• A strong understanding of the incident response lifecycle, threat actor methodologies (MITRE ATT&CK Framework), and the critical role of malware analysis in containment, eradication, and recovery
• Familiarity with analyzing malware behavior and artifacts in cloud environments (e.g., AWS, Azure, GCP) and understanding cloud-specific threats
• Ability to translate malware analysis findings into actionable threat intelligence, including YARA rules, Snort/Suricata signatures, and comprehensive threat reports
• A bachelor’s degree in computer science, Information Security, or a related field, or equivalent professional experience. One or more of the following certifications are highly preferred: GIAC Reverse Engineering Malware (GREM), OSCP, OSCE, or similar advanced malware analysis certifications

It is the Bank’s expectation that employees hired into this role will work in the Jacksonville office in accordance with the Bank’s hybrid working model.

Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion.

The salary range for this position in Jacksonville is $78,000 to $120,500. Actual salaries may be based on a number of factors including, but not limited to, a candidate’s skill set, experience, education, work location and other qualifications. Posted salary ranges do not include incentive compensation or any other type of remuneration.

At Deutsche Bank, we recognize that our benefit programs have a profound impact on our colleagues. That’s why we are focused on providing benefits and perks that enable our colleagues to live authentically and be their whole selves, at every stage of life. We provide access to physical, emotional, and financial wellness benefits that allow our colleagues to stay financially secure and strike balance between work and home. Click here to learn more!

Learn more about your life at Deutsche Bank through the eyes of our current employees https://careers.db.com/life

The California Consumer Privacy Act outlines how companies can use personal information. If you are interested in receiving a copy of Deutsche Bank’s California Privacy Notice please email [e-mail].