Malware Analyst II - 24x7 Shift Cycle (Back-Half Night Shift) with Security Clearance

Black Eagle Defense; Fort Meade (MD); On-site; USD 171,000 - 228,000; Full time

Job summary

Black Eagle Defense is seeking a Malware Analyst II to support clients by analyzing malicious code and producing actionable reports. You will identify indicators of compromise, recommend mitigations, and contribute to improving malware detection practices while engaging in research on emerging threats.

The role requires deep analysis, documentation, and collaboration with internal and external teams on cybersecurity threats and defense strategies.

Qualifications

• Five (5) years of relevant, demonstrated experience.
• Three (3) years of demonstrated malware analysis experience.
• Two (2) years with tools such as GHIDRA, SYSInternals, FireEye AX, or similar technologies.
• One (1) year of development experience in languages such as Python, Lua, C/C++, Ruby, or similar.

Responsibilities

• Analyze and evaluate malware to create technical reports for indicators of compromise and to recommend mitigation and detection actions.
• Improve malware analysis techniques and identify new ways to enhance threat identification.
• Conduct research and training on emerging malware threats.
• Communicate findings clearly in written and verbal form; develop mitigation strategies.

Skills

Malware analysis

Dynamic analysis

Static analysis

Host/network monitoring

Documentation & reporting

Tools

GHIDRA

SYSInternals

FireEye AX

Python

Lua

C/C++

Ruby

Splunk Fundamentals 1

Job description

Job Description SHIFT DETAILS This role operates on a fixed 12-hour shift schedule. The shift schedule is permanent upon hire and does not rotate between day and night shifts or different days of the week. * Back-Half Night: Wednesday - Saturday | 18:00 - 06:00 (6:00 PM - 6:00 AM) SALARY RANGE $171,000 - $228,000/year. DUTIES As a successful candidate for the Malware Analyst II, you will support clients in solving difficult problems by providing recommendations based on the results of malicious code analysis. Analyze and evaluate malicious code to create technical reports for indicators of compromise and to recommend mitigation and detection actions. Work to continually improve current malware analysis techniques and identify new ways to improve malware identification best practices. Conduct research and training on comprehending emerging malicious code threats. Required Skills SKILLS * Conduct both dynamic and static analysis of suspicious code in order to establish malicious capability and determine potential impact

• Experience with host and network monitoring for analysis of malware execution & propagation methodologies
• Perform analysis on captured data, such as audit, log, network traffic, et cetera, to identify any intrusion-related artifacts
• Understanding of operating system-specific exploitation vectors
• Analyze malicious code by employing tools, scripting languages, and leveraging virtual machines/environments
• Support 24/7 monitoring of malware threats to networks, hosts, mission platforms, and boundaries
• Generate documentation of vulnerabilities and exploits used by malware in written reports
• Communicate written and verbal information in a timely, clear, and concise manner
• Apply cybersecurity and privacy principles to organizational requirements (relevant to confidentiality, integrity, availability, authentication, non-repudiation)
• Generate a technical summary of findings in accordance with established reporting procedures
• Develop and recommend mitigation strategies
• Develop signatures, techniques, and rules to identify malware vectors
• Collaborate with internal and external organizations to evaluate emerging threats
• Correlate data from multiple sources to identify probable threat actors

QUALIFICATIONS Candidate must possess five (5) years of relevant, demonstrated experience. Three (3) years of demonstrated experience with malware analysis. Two (2) years of demonstrated experience with tools such as GHIDRA, SYSInternals, FireEye AX, or similar technologies. One (1) year of demonstrated experience with the development of code in languages such as Python, Lua, C/C++, Ruby, or similar.

CERTIFICATIONS & TECHNICAL PROFICIENCIES * DoD 8570 Compliance: CSSP Analyst baseline certification.

• IAT Certification: Must hold one certification from either Level I or Level II:
• IAT Level I: A+ CE, CCNA-Security, CND, Network+ CE, or SSCP * IAT Level II: CCNA Security, CySA+, GICSP, GSEC, Security+ CE, CND, or SSCP
• Computing Environment (CE) Certification: Microsoft OS, CentOS, or Red Hat OS certification.
• Specialized Analysis Certification: Must hold at least one of the following:
• GIAC Certified Forensic Analyst (GCFA)
• GIAC Reverse Engineering Malware (GREM)
• Required Training: Successful completion of the Splunk "Fundamentals 1" course.