Malware Analyst III (MA3)

Beyond SOF; Fort Meade (MD); On-site; USD 196,000 - 239,000; Full time

Job summary

Beyond SOF is seeking a Malware Analyst III to join our security team at Fort Meade, MD. The role requires a TS/SCI with CI Poly currently active, a bachelor’s degree in a related field, and DoD IAM III certification.

You will analyze software for vulnerabilities, re-create programs, and develop defenses against evolving threats. The position emphasizes advanced malware analytics, reverse engineering, and coordination of cyberspace operations.

Qualifications

• Ten years of experience in malware analysis and related fields.
• DoD 8140/8570 IAM Level III Certification, CSSP Manager required.
• Bachelor’s degree from an accredited college or university in Computer Engineering/CS/Cybersecurity or related discipline.

Responsibilities

• Analyze software to identify vulnerabilities and reverse engineer malware.
• Develop designs to offset malware and protect DoD infrastructure.
• Conduct vulnerability assessments and penetration testing of information systems.
• Perform in-depth research of software and methodologies to build defensive/offensive capabilities.
• Coordinate efforts to analyze cyberspace operations and related solutions.
• Create malware detection topologies and maintain familiarity with C/C++ and assembly.

Skills

Malware analysis

Reverse engineering

Vulnerability assessment

Digital forensics

Education

Bachelor’s degree in CS/Engineering/Cybersecurity

Tools

C/C++

Assembly

Windows internals

Unix/Linux

Job description

Malware Analyst III (MA3)

Salary: Up to $217,500, depending on education and experience
Security Requirements: TS/SCI with CI Poly (both active).
Education: Minimum of bachelor’s degree from an accredited college or
university in Computer Engineering, Computer Science, Cybersecurity, or related discipline.

Certifications

A minimum of DoD 8140/DoD 8570 IAM Level III Certification, CSSP Manager.

Experience (Ten Years Required)

• Employs engineering techniques and processes to analyze software to identify vulnerabilities. - Re-creates programs to rebuild something like it, exploits its weaknesses, or strengthens its defenses.
• Develops design specifications by inspection and analysis to offset various
  malware and to protect and defend USCYBERCOM infrastructure.
• Develops, researches, and maintains proficiency in tools, techniques,
  countermeasures, and trends in computer and network vulnerabilities, data hiding, and encryption. - Conducts vulnerability assessments/penetration tests of information systems.
• Ensures software standards are met; designs, develops, documents, tests, and debugs applications software and systems that contain logical and mathematical solutions. - Performs in-depth detailed research of software and methodologies to build defensive and offensive technical capabilities for USCYBERCOM.
• Possesses senior-level experience as a Malware Analyst with a background in cutting-edge cyberspace technologies.
• Often and without source code or documentation, performs system analysis, reverse engineering, and static, dynamic, and best-practice malware analytics methodologies and analysis on Windows, Android, or UNIX-based platforms.
• Coordinates effort to develop and analyze cyberspace operations, DCO, Computer Network Exploitation (CNE), and OCO solutions.
• Creates malware detection topologies. - Possesses comprehensive knowledge of programming skills especially including C/C++ and Assembly language, Windows internal C/C++ and either UNIX/Linux or mobile (Android) platform, malware and things related to malware research and analysis, reverse engineering, vulnerability analysis, exploit development, and related disciplines.