Reverse Engineer 2

GRVTY•Fort Meade, MD

3d•$118,000 - $148,000

About The Position

GRVTY is seeking an experienced Reverse Engineer to analyze malicious binaries, determine their functionality, and identify indicators of compromise. This position supports analysis of global cyber threats and provides information that assists with malware detection and mitigation. The role involves technical analysis of malicious binaries through controlled execution and/or static analysis of assembly code. The Reverse Engineer overcomes techniques designed to defeat analysis to determine malware functionality and capabilities, identify callbacks, assist with attribution to adversary infrastructure, and identify indicators of compromise. The role also produces information and documentation that enables malware detection, signature creation, and mitigation. Experience with malware reverse engineering is required; expertise with Ghidra and/or IDA Pro is helpful. The position requires an active TS/SCI clearance with polygraph, a qualifying degree and relevant malware reverse-engineering experience, and one of the specified certifications. The listed Maryland pay range is $118,000–$148,000. GRVTY describes its benefits as including health coverage, financial wellness, retirement planning, family assistance, continued education, and paid time off.

Requirements

Active TS/SCI clearance with polygraph.
Relevant experience must be in malware reverse engineering.
One of the following education and experience combinations: doctoral degree plus 2 years of relevant experience; master's degree plus 3 years; bachelor's degree plus 5 years; or associate degree plus 7 years.
Bachelor's degree in Computer Science, Computer Engineering, Information Systems, or a related discipline from an accredited college or university.
CISSP, GIAC GREM, or CREA certification is required.

Nice To Haves

Expertise with Ghidra and/or IDA Pro.

Responsibilities

Perform technical analysis of malicious binaries through controlled execution and/or static analysis of assembly code.
Overcome techniques designed to defeat analysis to determine malware functionality and capability.
Identify malware callbacks and indicators of compromise.
Assist with attribution to adversary infrastructure.
Provide information and documentation to enable malware detection, signature creation, and mitigation.