Malware / Reverse Engineer - U

Secure Technologies Group; Columbia, Northern (MD, KY); Hybrid; USD 90,000 - 130,000; Full time

Benefits offered by this job

PTO

Training support

Competitive salary

Job summary

SecureTech is seeking a Malware Engineer to analyze and report on malicious code, develop detection strategies, and support CMSP objectives. You will perform dynamic and static analysis, explore data artifacts, and craft actionable mitigation steps.

Ideal candidates have 2+ years of relevant experience, familiarity with tools like GHIDRA and FireEye AX, and programming skills in Python, Lua, C/C++, or Ruby.

Qualifications

• Bachelor's degree preferred; an additional 4 yrs of related experience can substitute for the degree
• Minimum two years of relevant experience, with senior levels possible
• Experience with languages such as Python, Lua, C/C++, Ruby is a plus

Responsibilities

• Conducts dynamic and static analysis of suspicious code to determine malicious capability and impact
• Analyzes captured data (audit, log, network traffic) to identify intrusion artifacts
• Produces reports on vulnerabilities and exploits used by malware
• Develops and communicates findings clearly and timely
• Develops mitigation strategies and detection techniques
• Generates signatures, rules to identify malware vectors
• Collaborates with internal/external teams to counter threats and improve CSSP mission

Skills

Python

Lua

C/C++

Ruby

Education

Bachelor's degree in IT/Cybersecurity or related field

Tools

GHIDRA

SYSInternals

FireEye AX

Job description

This position does not require a security clearance.

SecureTech Malware Engineers make a difference every day in support of the U.S. federal government.

We provide recommendations based on the results of malicious code analysis.

We analyze and evaluate malicious code to create technical reports for indicators of compromise and to recommend mitigation and detection actions.

We work and train to continually improve current malware analysis techniques, and identify new ways to improve malware identification best practices.

As a SecureTech Malware Engineer these are the types of tasks you can expect to spend your time on:

• Conducts both dynamic and static analysis of suspicious code in order to establish malicious capability and determine potential impact.
• Performs analysis on captured data (audit, log, network traffic, etc.) to identify any intrusion-related artifacts.
• Analyzes malicious code by employing tools, scripting languages, and leveraging virtual machines/environments.
• Generates documentation of vulnerabilities and exploits used by malware in written reports.
• Communicates written and verbal information in a timely, clear, and concise manner.
• Generates technical summary of findings in accordance with established reporting procedures.
• Develops and recommends mitigation strategies.
• Develops signatures, techniques, and rules to identify malware vectors.
• Collaborate with internal and external organizations to discover new threats, develop mitigation techniques, processes, and tools which further the CSSP mission, as directed by the customer.
• Evaluates emerging threats.
• Correlate data from multiple sources to identify probable threat actors.

And much more…

Qualifications:

• Bachelor's degree in Information Technology, Cybersecurity, or a related technical discipline is preferred, but an additional 4 yrs of related experience can substitute for the degree!
• These positions start with a minimum of two (2) years of relevant experience, but we are looking for more experienced engineers forsenior levels as well.
• Some experience withtools such as GHIDRA, SYSInternals, FireEye AX, or similar is a plus. Additionally, a strong candidate will haveexperience with development of code in languages such as Python, Lua, C/C++, Ruby or similar.

For positions beyond entry level, certifications such as CEH, GCIA, GCIH, CySA+, GCFA, GREM, PenTest+, or CCNA may be required.

Why come to the SecureTech family?

• We really do consider employees first in decisions. It is hard enough to work through the personal/social/technical hurdles that come with your position as a cleared defense contractor - no need to fight your own employer's red tape as well.
• We offer a compensation package that is more than just commensurate with this closed contractor community. We offer generous benefits (PTO, training support, etc) in addition to the high salaries. We know that you know - salary isn't everything.
• SecureTech is an Equal Opportunity Employer – we hire the right people for the job - regardless of employment status such as female, minority, protected veterans, individuals with disabilities, etc.
• Our concern is that you are qualified for the position, and that you are placed in a position in which you can be successful!