Cybersecurity - Malware Analyst - GHIDRA, FireEye, Python

Erias Ventures, LLC.; Fort Meade (MD); On-site; USD 190,000 - 215,000; Full time

Benefits offered by this job

Above Market Pay

401k with Immediate Vesting

Spot Bonuses for BD

Certifications & Degrees Bonuses

Medical Coverage

Vision & Dental Coverage

Disability & Life Insurance

Wellness Reimbursement

Paid Time Off

Job summary

Erias Ventures, LLC. seeks a Malware Analyst to support clients by analyzing malicious code and producing reports with indicators of compromise and recommended mitigations.

You will improve malware techniques, perform dynamic and static analysis, and develop detection signatures while collaborating with internal and external teams. The role requires a current Top-Secret/SCI with polygraph clearance and DoD 8570 CSSP Analyst baseline, IAT certifications, and GIAC GCFA or GREM.

Qualifications

• Two (2) years of demonstrated experience with tools such as GHIDRA, SYSInternals, FireEye AX, or similar technologies.
• One (1) year of demonstrated experience with development of code in languages such as Python, Lua, C/C++, Ruby or similar.
• Five (5) years of demonstrated experience in cybersecurity.
• Three (3) years of demonstrated experience with malware analysis.
• Requires DoD 8570 compliance with CSSP Analyst baseline certification, Information Assurance Technical (IAT) Level I or Level II certification, and Computing Environment (CE) certification.
• Requires Global Information Assurances Certification (GIAC) Certified Forensic Analyst (GCFA) certificate or Certified Reverse Engineering Malware (GREM) certificate.
• Requires successful completion of the Splunk software training course "Fundamentals 1".

Responsibilities

• Conduct dynamic and static analysis of suspicious code to determine malicious capability and impact.
• Monitor host and network for malware execution and propagation.
• Analyze captured data to identify intrusion-related artifacts.
• Understand OS exploitation vectors and document findings clearly.
• Use tools and scripting to analyze malware in VM environments.
• Support 24/7 monitoring of malware threats across networks, hosts, and mission platforms.
• Generate vulnerability and exploit reports with actionable mitigations.
• Communicate findings in written and verbal form promptly.
• Apply cybersecurity principles to confidentiality, integrity, and availability.
• Develop and propose mitigation strategies and signatures to identify vectors.
• Collaborate to discover threats and develop mitigation techniques for CSSP missions.
• Evaluate emerging threats.

Skills

Python

Lua

C/C++

Ruby

Tools

GHIDRA

SYSInternals

FireEye AX

Splunk Fundamentals

Job description

Erias Ventures was founded to serve its customers with an entrepreneurial mindset. We value creative problem-solving, open communication, and empowering our employees to make decisions and put forth new ideas.

We are seeking engineers who wish to grow their careers and want to become part of a strong, entrepreneurial-minded, and technical company focused on bringing innovative solutions to the difficult mission problems facing our customers.

Description

The Malware Analyst support clients in solving difficult problems by providing recommendations based on the results of malicious code analysis. Analyze and evaluate malicious code to create technical reports for indicators of compromise and to recommend mitigation and detection actions. Work to continually improve current malware analysis techniques, and identify new ways to improve malware identification best practices. Conduct research and training on comprehending emerging malicious code threats.

• Conduct both dynamic and static analysis of suspicious code in order to establish malicious capability and determine potential impact.
• Experience with host and network monitoring for analysis of malware execution & propagation methodologies.
• Perform analysis on captured data, such as audit, log, network traffic, et cetera, to identify any intrusion-related artifacts.
• Understanding of operating system-specific exploitation vectors.
• Analyze malicious code by employing tools, scripting languages, and leveraging virtual machines/environments.
• Support 24/7 monitoring of malware threats to networks, hosts, mission platforms, and boundaries.
• Generate documentation of vulnerabilities and exploits used by malware in written reports.
• Communicate written and verbal information in a timely, clear, and concise manner.
• Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation).
• Generate technical summary of findings in accordance with established reporting procedures.
• Develop and recommend mitigation strategies.
• Develop signatures, techniques, and rules to identify malware vectors.
• Collaborate with internal and external organizations to discover new threats, develop mitigation techniques, processes, and tools which further the CSSP mission, as directed by the customer.
• Evaluate emerging threats.

Clearance

A current Top-Secret/SCI with polygraph security clearance is required. Candidates cannot be sponsored or nominated for a government security clearance under this position.

Experience Required Skills

• Two (2) years of demonstrated experience with tools such as GHIDRA, SYSInternals, FireEye AX, or similar technologies.
• One (1) year of demonstrated experience with development of code in languages such as Python, Lua, C/C++, Ruby or similar.
• Five (5) years of demonstrated experience in cybersecurity.
• Three (3) years of demonstrated experience with malware analysis.
• Requires DoD 8570 compliance with CSSP Analyst baseline certification, Information Assurance Technical (IAT) Level I or Level II certification, and Computing Environment (CE) certification
• Requires Global Information Assurances Certification (GIAC) Certified Forensic Analyst (GCFA) certificate or Certified Reverse Engineering Malware (GREM) certificate.
• Requires successful completion of the Splunk software training course "Fundamentals 1".

Benefits

Erias Ventures provides a complete package of wealth, health, and happiness benefits. The expected salary range for this position, depending on education and years of experience is $190,000 - $215,000.

Wealth Benefits

• Above Market Hourly Pay
• 11% Roth or Traditional 401k with Immediate Vesting and Deposit
• Spot Bonuses for Assisting with Business Development and Company Growth
• Professional Development Bonuses for Certificates and Degrees

Health Benefits:

• Company subsidized Medical Coverage
• 100% Company Paid Vision and Dental Coverage
• 100% Company Paid Long Term Disability, Short Term Disability, and Group Life Insurance
• Monthly Wellness Reimbursement

Happiness Benefits

• Paid Time Off with Flexible Work Schedules and Birthday Off
• Amazon Prime Membership and Monthly Internet Reimbursement
• Technology and Productivity Allowance for Equipment and Supplies
• Morale Building and Company Events to Celebrate our Successes and Build our Community
• Onboarding and Annual Swag
• Company Paid Professional Development and Training

At Erias Ventures, we are dedicated to fostering a diverse and inclusive workplace. As an equal opportunity employer, we ensure that all qualified applicants are considered for employment based on merit, without discrimination. We welcome individuals regardless of race, color, religion, gender, gender identity or expression, sexual orientation, national origin, genetics, disability, age, or veteran status.

Referrals & Inquiries

Do you know a cleared professional seeking to advance their career? Interested in earning some extra cash? If so, refer them to us with their name and contact details, and you could be eligible for a referral bonus of up to $10,000 for each successful hire.

Not seeing the right position right now? Reach out to us, and we’ll notify you as new contracts and opportunities become available!

Please Send Referrals And Inquiries To

[e-mail]

To learn more about our company visit our webpage or LinkedIn.