Malware Reverse Engineer, Senior

Booz Allen Hamilton•Fort Meade, MD

10d•$99,000 - $225,000

About The Position

As a Senior Malware Reverse Engineer at Booz Allen, you will apply vulnerability analysis, network mapping, exploitation, defensive, and IT logging process experience to execute offensive cyber operations that inform national security missions. The role focuses on analyzing adversary tactics, techniques, and procedures and producing intelligence that supports mission owners. Applicants must hold TS/SCI clearance with a polygraph.

Requirements

Experience using industry-standard static and dynamic analysis tools, including disassemblers, debuggers, virtual machines, and hex editors.
Experience in a scripting language such as Python or JavaScript.
Experience with development or reverse engineering of Windows API targets.
Knowledge of Windows, Linux, and Mac operating systems, application behaviors, and network traffic analysis to identify malware exploits.
Experience with vulnerability research and exploitation methodologies such as fuzzing, shellcode, and leveraging memory corruption vulnerabilities.
Ability to analyze shellcode, packed or obfuscated code, and associated algorithms, and capture and interpret traces using Wireshark.
Ability to read at least one of C, C++, C#, Go, Java, JavaScript, Python, or Rust.
TS/SCI clearance with a polygraph.
Bachelor's degree and 5+ years of experience in malware reverse engineering, or a master's degree and 3+ years of experience in malware reverse engineering, or 8+ years of experience in malware reverse engineering in lieu of a degree.

Nice To Haves

Ability to read C, C++, and Python.
GREM Certification.
OSED or OSEE Certification.

Responsibilities

Use industry-standard static and dynamic analysis tools, including disassemblers, debuggers, virtual machines, and hex editors.
Analyze malware exploits using knowledge of operating systems, application behaviors, and network traffic.
Conduct vulnerability research and apply exploitation methodologies, including fuzzing, shellcode, and memory corruption vulnerabilities.
Analyze shellcode, packed or obfuscated code, and associated algorithms.
Capture and interpret traces using Wireshark.
Develop or reverse engineer Windows API targets.