Malware Analyst - Assistant Vice President

Deutsche Bank; United States; Hybrid; USD 78,000 - 121,000; Full time

Benefits offered by this job

Hybrid work model

Health benefits

Retirement savings plans

Parental leave

Educational resources

Job summary

Deutsche Bank is seeking a Malware Analyst for the ATR group in Jacksonville, FL. You will perform in-depth malware analysis, reverse engineering, and behavioral studies to support incident response during active security events.

The role emphasizes creating actionable findings, developing techniques, and automating workflows with tools like YARA, IDA Pro, and Ghidra across multiple OS platforms.

Qualifications

• Proven experience performing static and dynamic malware analysis.
• Experience in reverse engineering and behavioral analysis on enterprise threats.
• Ability to automate tasks using scripting for artifacts extraction and tooling.

Responsibilities

• Analyze malware during active incidents (ransomware, targeted threats).
• Perform static/dynamic analysis and reverse engineering across Windows/Linux/macOS.
• Document findings clearly for threat intel reports and incident communication.
• Develop new analysis techniques and automate workflows and signatures (e.g., YARA).
• Contribute to containment, eradication, and remediation during incidents.

Skills

Malware analysis

Reverse engineering

Scripting (Python/PowerShell)

Windows internals

AI tooling for workflows

Education

Bachelor's in CS/Info Security

Certs: GREM/OSCP/OSCE

Tools

IDA Pro

Ghidra

x64dbg

Wireshark

Process Monitor

Job description

Job Description:

Job Title Malware Analyst
Corporate Title Assistant Vice President
Location Jacksonville, FL

Overview

At Deutsche Bank, our defense is as sophisticated as the threats we face. The Information Security Threat Operations (ISTO) team is the front line, defending a global enterprise against thousands of daily intrusion attempts. You will be joining the Advanced Threat Response (ATR) group, an elite unit of specialists in digital forensics, malware analysis, and threat hunting. As a Malware Analyst for Malware Analysis and Incident Response, you will play a crucial role in understanding the malicious software impacting our organization during active incidents. This is a hands‑on technical role where you will support the in‑depth analysis of malware samples, from various threat actors and targeted attacks, to contribute to real‑time incident response efforts.

What We Offer You

• A diverse and inclusive environment that embraces change, innovation, and collaboration
• A hybrid working model, allowing for in-office / work from home flexibility, generous vacation, personal and volunteer days
• Employee Resource Groups support an inclusive workplace for everyone and promote community engagement
• Competitive compensation packages including health and wellbeing benefits, retirement savings plans, parental leave, and family building benefits
• Educational resources, matching gift and volunteer programs

What You'll Do

• Conduct in-depth analysis of malware involved in active security incidents, including ransomware, targeted attacks, and advanced persistent threats
• Execute static and dynamic analysis, reverse engineering, and behavioral analysis of sophisticated malware samples across various operating systems (Windows, Linux, macOS)
• Serve as a technical expert during critical security incidents, leveraging malware analysis findings to identify threat actor TTPs, develop containment strategies, and support rapid eradication and remediation efforts
• Articulate basic technical findings from malware analysis into clear and concise documentation, contributing to internal threat intelligence reports for technical peers and supporting broader incident communication
• Enhance and mature the team's malware analysis capabilities by developing new analytical techniques, automating analysis workflows, creating custom tools, and improving detection signatures (e.g., YARA rules)

Skills You’ll Need

• Proven experience conducting in-depth static and dynamic malware analysis, reverse engineering, and behavioral analysis of sophisticated threats in an enterprise environment
• Hands‑on expertise with industry‑standard malware analysis tools (e.g., IDA Pro, Ghidra, x64dbg, malware sandboxes, Wireshark, Process Monitor) and methodologies for understanding malicious code
• Proficiency in at least one scripting language (e.g., Python, PowerShell) for automating malware analysis tasks, extracting artifacts, and developing custom analysis tools
• Deep understanding of Windows and Linux operating system internals, memory management, process execution, and network protocols relevant to malware behavior
• Proven ability to leverage AI tools to enhance productivity, optimize workflows to solve business problems, while applying critical judgment to ensure responsible and ethical use of data and AI outputs

Skills That Will Help You Excel

• Proven experience with advanced reverse engineering techniques, including obfuscation bypass, anti‑analysis trick identification, and unpacking complex malware
• A strong understanding of the incident response lifecycle, threat actor methodologies (MITRE ATT&CK Framework), and the critical role of malware analysis in containment, eradication, and recovery
• Familiarity with analyzing malware behavior and artifacts in cloud environments (e.g., AWS, Azure, GCP) and understanding cloud‑specific threats
• Ability to translate malware analysis findings into actionable threat intelligence, including YARA rules, Snort/Suricata signatures, and comprehensive threat reports
• A bachelor's degree in computer science, Information Security, or a related field, or equivalent professional experience. One or more of the following certifications are highly preferred: GIAC Reverse Engineering Malware (GREM), OSCP, OSCE, or similar advanced malware analysis certifications

Expectations

It is the Bank's expectation that employees hired into this role will work in the Jacksonville office in accordance with the Bank's hybrid working model.

Deutsche Bank provides reasonable accommodations to candidates and employees with a substantiated need based on disability and/or religion.

The salary range for this position in Jacksonville is $78,000 to $120,500. Actual salaries may be based on a number of factors including, but not limited to, a candidate's skill set, experience, education, work location and other qualifications. Posted salary ranges do not include incentive compensation or any other type of remuneration.

Deutsche Bank Ben