Mid-Level Threat Intelligence Specialist

Nyla Technology Solutions•Annapolis Junction, MD

About The Position

We are seeking an autonomous, detail-driven Malware Analyst & Reverse Engineer to investigate and counter global cyber threats. In this mission-critical role, you will perform deep-dive static and dynamic analysis on sophisticated malicious code, unpack obfuscated binaries, and reconstruct complex threat actor tradecraft. Operating independently within a fast-paced threat intelligence environment, you will leverage industry-standard disassemblers like IDA Pro and Ghidra to extract indicators of compromise (IOCs), analyze behavioral artifacts, and author comprehensive threat reports that directly inform national defense and operational cyber countermeasures.

Requirements

ACTIVE SECURITY CLEARANCE AT THE TS/SCI POLYGRAPH LEVEL IS REQUIRED
Demonstrated mastery of static and dynamic binary analysis using disassemblers and decompilers such as IDA Pro and/or Ghidra.
Hands-on experience analyzing complex malware families, unpacking protected/obfuscated executables, and inspecting network protocols, memory dumps, and system calls.
Deep understanding of threat actor tactics, techniques, and procedures (TTPs), MITRE ATT&CK framework mappings.
Proven ability to work independently, manage complex technical investigations end-to-end, and drive high-priority analysis to completion with minimal oversight.
Strong track record authoring clear, concise malware analysis reports, extracting actionable IOCs, and creating YARA or Snort rules for enterprise detection.
Bachelor’s Degree in Computer Science, Computer Engineering, Cyber Security, or a related technical discipline, PLUS 5+ years of professional experience in reverse engineering, malware analysis, or software development OR Associate's Degree , PLUS 7+ years of relevant hands-on experience in reverse engineering and low-level code analysis in lieu of a degree.

Nice To Haves

Proficiency in Python for automating malware extraction routines, decoding payloads, and developing custom IDA Pro / Ghidra scripts.
Solid comprehension of x86/x64 assembly, Windows OS internals, Linux kernel mechanics, or mobile operating systems.
Experience utilizing or configuring dynamic analysis sandboxes (e.g., Cuckoo) and dynamic instrumentation tools (e.g., Frida, x64dbg).

Responsibilities

Perform deep-dive static and dynamic analysis on sophisticated malicious code.
Unpack obfuscated binaries.
Reconstruct complex threat actor tradecraft.
Leverage industry-standard disassemblers like IDA Pro and Ghidra to extract indicators of compromise (IOCs).
Analyze behavioral artifacts.
Author comprehensive threat reports that directly inform national defense and operational cyber countermeasures.