Malware Analyst II (MA2)

Beyond SOF; Fort Meade (MD); On-site; USD 122,000 - 149,000; Full time

Job summary

Beyond SOF near Fort Meade is seeking a Malware Analyst II to join our cybersecurity team. You will analyze software to identify vulnerabilities, recreate samples, and develop defenses against malware targeting USCYBERCOM infrastructure.

Candidates must hold a bachelor’s degree in a related field, DoD IAM II certification, and five years of malware analysis experience. TS/SCI with CI Poly is required.

Qualifications

• Bachelor’s degree in a related field from an accredited college or university.
• DoD 8140/DoD 8570 IAM Level II certification required.
• Five years of malware analysis experience.

Responsibilities

• Analyze software to identify vulnerabilities and reproduce samples.
• Develop defenses and countermeasures against malware threats.
• Perform vulnerability assessments/penetration tests on information systems.
• Conduct reverse engineering and malware analysis across Windows/UNIX/Android.
• Prepare technical briefings and proposals.

Skills

Malware analysis

Vulnerability assessments

Reverse engineering

C/C++

Assembly

Incident response

Education

Bachelor’s degree in Computer Engineering/Computer Science/Cybersecurity or related

Job description

Malware Analyst II (MA2)

Salary: Up to $135,500, depending on education and experience

Security Requirements: TS/SCI with CI Poly (both active).

Education: Minimum of bachelor’s degree from an accredited college or university in Computer Engineering, Computer Science, Cybersecurity, or related discipline.

Certifications: A minimum of DoD 8140/DoD 8570 IAM Level II Certification, CSSP Incident Responder or CSSP Infrastructure Support.

Experience (Five Years Required):

• Employs engineering techniques and processes to analyze software to identify vulnerabilities. Re-creates programs to rebuild something like it, exploits its weaknesses, or strengthens its defenses.
• Develops design specifications by inspection and analysis to offset various malware and to protect and defend USCYBERCOM infrastructure.
• Develops, researches, and maintains proficiency in tools, techniques, countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption. Conducts vulnerability assessments/penetration tests of information systems.
• Ensures software standards are met; designs, develops, documents, tests, and debugs applications software and systems that contain logical and mathematical solutions. Performs in-depth detailed research of software and methodologies to build defensive and offensive technical capabilities for USCYBERCOM.
• Participates in formal technical briefing and proposals.
• Performs system analysis, reverse engineering, and static, dynamic, and best- practice malware analytical methodologies on Windows, Android, or UNIX-based platforms
• Has an in-depth understanding of security concepts, protocols, processes, architectures, and tools (authentication and access control technologies, intrusion detection, network traffic analysis, incident handling, media/malware analysis, etc.), malware and programming skills to include C/C++ and Assembly language, and detailed understanding of how network-based attacks work at the operating system and/or protocol level.