Senior Malware Analyst

Invictus International; Geraghty Village (MD); On-site; USD 120,000 - 160,000; Full time

Job summary

Invictus International is seeking a Senior Malware Analyst in Fort Meade, MD. The role requires deep malware reverse engineering expertise and experience with leading tooling and threat frameworks.

You will collaborate with the SOC to implement countermeasures, develop automation scripts, and mentor teammates while keeping pace with evolving threats and industry standards.

Qualifications

• Bachelor's degree preferred in a related field.
• Minimum 5 years of malware reverse engineering experience, focusing on advanced threats.
• Expertise with reverse engineering tools and techniques (IDA Pro, Ghidra, OllyDbg, x64dbg).
• Proficiency in C, C++, Python, and assembly language.
• Strong OS, networking, and software exploitation knowledge.
• Familiarity with MITRE ATT&CK and Cyber Kill Chain frameworks.
• Excellent written and verbal communication; ability to convey technical concepts clearly.

Responsibilities

• Conduct in-depth malware reverse engineering of samples and identify functionality and purpose.
• Use static and dynamic analysis, debugging, and disassembly to dissect malware.
• Develop scripts and tools to automate reverse engineering processes.
• Understand techniques used by advanced threat actors including zero-days and APTs.
• Collaborate with SOC to develop countermeasures and IDS rules.
• Provide guidance to SOC members on incident response and analysis.
• Create training materials to enhance SOC malware analysis capabilities.
• Maintain up-to-date knowledge of malware threats and industry trends.
• Contribute to threat intelligence through analytical reports and assessments.
• Liaise with law enforcement and industry groups to share threat information.

Skills

Reverse engineering

Malware analysis

Programming: C/C++, Python, Assembly

Communication skills

Training & mentoring

Threat intel understanding

Education

Bachelor's degree preferred

Tools

ID A Pro

Ghidra

OllyDbg

x64dbg

MITRE ATT&CK framework

Cyber Kill Chain

Job description

Title: Senior Malware Analyst

Location: Fort Meade, MD

Clearance: TS/SCI w/CI polygraph

Invictus, a Red River company, delivers technology and services supporting government and national security missions. We combine cleared mission expertise with enterprise engineering, technology partnerships and large-program execution in support of advanced modernization, cybersecurity, intelligence and systems integration. Our teams support complex operational environments across the U.S. and around the world, helping customers strengthen resilience, accelerate mission outcomes and deploy capabilities that meet demanding mission requirements. Learn more at www.InvictusIC.com.

Responsibilities:

• Conduct in-depth malware reverse engineering, including the analysis of malware samples, understanding their functionality, and identifying their purpose
• Utilize various tools and techniques, such as static and dynamic analysis, debugging, and disassembly, to analyze and dissect complex malware samples
• Develop custom scripts and tools to automate and streamline the reverse engineering process
• Identify and understand the techniques used by advanced threat actors, including zero-day vulnerabilities, exploit development, and advanced persistent threats (APTs)
• Collaborate with the SOC team to develop and implement countermeasures, such as antivirus signatures, intrusion detection system (IDS) rules, and mitigation strategies
• Provide expert guidance and advice to other SOC team members, assisting with incident response and malware analysis efforts
• Develop and deliver training materials to enhance the skills and knowledge of the SOC team in the field of malware reverse engineering
• Maintain up-to-date knowledge of the latest malware threats, vulnerabilities, and industry trends, sharing relevant information with the SOC team
• Contribute to the development of the organization's threat intelligence capabilities by producing high-quality analytical repo11s and assessments
• Liaise with external partners such as law enforcement, industry peers, and information sharing groups, to exchange information on threats and best practices

Requirements:

• Bachelor's degree preferred, with a minimum of 5 years of experience in malware reverse engineering, with a strong focus on advanced threats and sophisticated malware
• Expertise in reverse engineering tools and techniques, including IDA Pro, Ghidra, OllyDbg, and x64dbg
• Proficiency in programming languages such as C, C++, Python, and Assembly
• Strong understanding of operating systems, networking protocols, and software exploitation techniques
• Familiarity with various threat intelligence platforms such as MITRE ATT&CK framework and the Cyber Kill Chain
• Experience with monitoring threats through Tools, Techniques, and Procedures and how they relate to the MITRE ATT&CK framework
• Excellent written and verbal communication skills, with the ability to present complex information in a clear and concise manner
• The ability to communicate technical concepts to technical and non-technical audiences
• Capability to train and mentor staff and bring awareness to current and emerging threats
• Current active TS/SCI clearance w/CI polygraph required

Equal Opportunity Employer/Veterans/Disabled