Reverse Engineer 3

GRVTY•Fort Meade, MD

3d•$147,000 - $177,000

About The Position

GRVTY is seeking experienced Reverse Engineers to analyze malicious binaries using various methods and determine their functionality and indicators of compromise. The role provides information that assists with malware detection and mitigation, including technical analysis through controlled execution and/or static analysis of assembly code. The analyst must overcome techniques designed to defeat analysis to ascertain malware functionality, capabilities, callbacks, adversary infrastructure, and indicators of compromise. The position also involves analyzing IOCs and APTs, creating detection signatures using YARA or SNORT, supporting risk identification, and providing mitigation strategies. The successful candidate will provide information and documentation that enables malware detection, signature creation, and mitigation.

Requirements

Active TS/SCI clearance with polygraph.
Relevant experience must be in malware reverse engineering.
Proficiency working with malicious binaries and analyzing assembly code.
Experience with malware reverse engineering.
Experience with computer networking and reverse-engineering TTPs.
CISSP, GIAC GREM, or CREA certification.
One of the following education and experience combinations: doctoral degree plus 4 years of relevant experience; master's degree plus 6 years; bachelor's degree plus 8 years; or associate degree plus 10 years.
Bachelor’s degree in Computer Science, Computer Engineering, Information Systems, or a related discipline from an accredited college or university.

Nice To Haves

Expertise with Ghidra and/or IDA Pro.

Responsibilities

Analyze malicious binaries and determine their functionality and indicators of compromise.
Perform technical analysis through controlled execution and/or static analysis of assembly code.
Overcome techniques designed to defeat analysis to ascertain malware functionality, capabilities, and callbacks.
Assist with attribution to adversary infrastructure and identification of indicators of compromise.
Provide information and documentation to enable malware detection, signature creation, and mitigation.
Analyze IOCs and APTs and create malware detection signatures using YARA or SNORT.
Support identification of areas of risk and provide mitigation strategies.