Malware Analysis Intern - Summer 2027

Software Engineering Institute | Carnegie Mellon University; Pittsburgh (Allegheny County); On-site; USD 34,000 - 48,000; Full time

Job summary

The Software Engineering Institute (SEI) at Carnegie Mellon University is offering an internship in the Threat Analysis Directorate within CERT. You will join a team of security experts focused on advancing malware analysis, automation, and reverse engineering to counter sophisticated threats.

As an intern, you will research complex problems, develop new tools, and collaborate with engineers and researchers.

Qualifications

• Must be enrolled in a degree program and able to participate as an intern.
• Familiarity with C or C++ at a low level.
• Familiarity with Python scripting language.
• Basic knowledge of cybersecurity tools (e.g., Sysinternals) and monitoring.
• Ability to collaborate with engineers and researchers across teams.
• Willingness to learn new technologies with cross-functional teams.
• Must be organized, detail-oriented, and able to document findings clearly.

Responsibilities

• Binary analysis using tools like Ghidra and IDA Pro on various architectures.
• Script and tool development to automatically extract indicators.
• Design and prototype new analysis tools and workflows.
• Analyze and document complex security threats for national security purposes.

Skills

Critical thinking

Low-level languages (C/C++)

Python scripting

Cybersecurity tools basics

Collaboration

Learning mindset

Documentation & communication

Education

Enrolled in a degree granting program

Job description

What We Do:

The SEI helps advance software engineering principles and practices and serves as a national resource in software engineering, computer security, and process improvement. The SEI works closely with defense and government organizations, industry, and academia to continually improve software-intensive systems. Our core purpose is to help organizations improve software engineering capabilities and develop or acquire the right software, defect free, within budget and on time, every time.

Position Summary

You will work as a part of the Threat Analysis Directorate within CERT and will collaborate with a group of security experts focused on advancing the state of the art and practice for analyzing, assuring, and countering software systems to enhance National Security.

You will assist members of the Malware Analysis Team and develop new and innovative tools that drive automation in the malware analysis process.

You will research and analyze complex problems, leveraging both AI and traditional reverse engineering methods to meet the challenges of a rapidly evolving threat landscape.

You will analyze malware to thoroughly understand the given malware sample or family and develop tools to help responders deal with sophisticated, novel threats.

You will contribute to a variety of core functions including:

• Tool development and automation
• Malware analysis and reverse engineering capability development
• Program analysis research
• Emerging threats analysis

Requirements

• Enrolled in a degree granting program.
• Willingness to travel to various locations to support the SEI’s overall mission. This includes within the SEI and CMU community.
• You will be subject to a background check and must be eligible to work in the United States without Visa sponsorship.

Knowledge, Skills and Abilities

• Ability to critically think and problem solve
• Familiarity with a low-level computer programming a language, such as C or C++
• Familiarity with a scripting language, such as python
• Basic knowledge of common cybersecurity tools, such as system and network monitoring tools (e.g. Microsoft Sysinternals)
• Ability to collaborate internally and externally with professional engineers and researchers
• Willingness to learn new technologies with cross-functional teams
• Must be organized, detail-oriented, and have the capacity to clearly document and communicate any findings

Desired Experience

• Experience with static binary or malware analysis
• Experience with technical writing
• Research experience
• Experience with debugging

These experiences may also come from education-driven experiences or extracurriculars.

Job Function Breakdown

• Binary analysis, to include the use of reverse engineering tools such as Ghidra and IDA Pro on a variety of microprocess architectures: 25%

• Script and tool development to automatically extract key indicators: 25%

• Design and prototype new analysis and tools: 25%

• Analyze and document complex security threats: 25%

TOTAL = 100%

This position will be onsite at the Pittsburgh office 5 days a week.

Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran.

Location

Pittsburgh, PA

Job Function

Non-CMU Students

Position Type

Intern (Fixed Term)

Full time/Part time

Full time

Pay Basis

Hourly

More Information

• Please visit “Why Carnegie Mellon” to learn more about becoming part of an institution inspiring innovations that change the world.

• Click here to view a listing of employee benefits

• Carnegie Mellon University is an Equal Opportunity Employer/Disability/Veteran

• Statement of Assurance