Malware Reverse Engineer, Senior

Booz Allen Hamilton•Fort Meade, MD

9d•$99,000 - $225,000

About The Position

Booz Allen is hiring a Senior Malware Reverse Engineer to support offensive cyber operations that inform critical national security missions. The role applies vulnerability analysis, network mapping, exploitation, defensive, and IT logging experience to understand adversary tactics, techniques, and procedures and produce intelligence for mission owners. The position is located in Fort Meade, Maryland, and is not listed as remote.

Requirements

Experience using industry-standard static and dynamic analysis tools, including disassemblers, debuggers, virtual machines, and hex editors.
Experience with a scripting language such as Python or JavaScript.
Experience with development or reverse engineering of Windows API targets.
Knowledge of Windows, Linux, and Mac operating systems, application behaviors, and network traffic analysis to identify malware exploits.
Experience with vulnerability research and exploitation methodologies such as fuzzing, shellcode, and leveraging memory corruption vulnerabilities.
Ability to analyze shellcode, packed or obfuscated code, and associated algorithms, and capture and interpret traces using Wireshark.
Ability to read at least one of C, C++, C#, Go, Java, JavaScript, Python, or Rust.
TS/SCI clearance with a polygraph.
Bachelor's degree and 5 or more years of malware reverse engineering experience, or a master's degree and 3 or more years of experience, or 8 or more years of experience in lieu of a degree.

Nice To Haves

Ability to read C, C++, and Python.
GREM certification.
OSED or OSEE certification.

Responsibilities

Perform malware reverse engineering and analyze malware exploits.
Use static and dynamic analysis tools, including disassemblers, debuggers, virtual machines, and hex editors.
Analyze shellcode, packed or obfuscated code, and associated algorithms.
Capture and interpret network traces using Wireshark.
Apply vulnerability research and exploitation methodologies, including fuzzing, shellcode, and memory corruption vulnerabilities.
Support offensive cyber operations through vulnerability analysis, network mapping, exploitation, defensive, and IT logging processes.