Malware Analyst 2

Responsibilities

• Conduct static and dynamic analysis of suspicious and malicious code to determine capabilities, behavior, and potential impact.
• Analyze malware execution through host and network monitoring to identify propagation techniques and intrusion-related artifacts.
• Examine audit logs, network traffic, and captured data to identify indicators of compromise and support incident investigations.
• Research operating system-specific exploitation techniques and malware attack vectors.
• Utilize scripting languages, reverse engineering tools, and virtual environments to analyze malicious code.
• Create technical reports documenting malware capabilities, vulnerabilities, indicators of compromise, and recommended mitigation strategies.
• Develop malware signatures, detection rules, and analytical techniques to improve identification and response efforts.
• Correlate data from multiple sources to identify threat actors and emerging threats.
• Collaborate with internal and external partners to develop new malware detection methodologies, processes, and tools.
• Communicate technical findings clearly through written reports and verbal briefings.
• Support continuous monitoring of malware threats across enterprise networks, hosts, mission platforms, and boundary systems.

Requirements

• Five (5) years of cybersecurity experience.
• Three (3) years of malware analysis experience, including static and dynamic analysis.
• Experience using malware analysis or reverse engineering tools such as Ghidra, Sysinternals, FireEye AX, or similar technologies.
• Experience developing scripts or software using Python, C/C++, Lua, Ruby, or similar languages.
• Experience analyzing host artifacts, network traffic, system logs, and malware behavior to identify indicators of compromise.
• Strong written and verbal communication skills with the ability to produce technical reports and recommend mitigation strategies.

Qualifications

• US citizenship and an active TS/SCI with Polygraph security clearance required.

Skills

• Active DoD 8570 compliance with: CSSP Analyst baseline certification, IAT Level II or Level III certification, GIAC Certified Forensic Analyst (GCFA), or GIAC Reverse Engineering Malware (GREM) certification.

Benefits

The Swift Group and Subsidiaries offer comprehensive benefits including but not limited to: healthcare, wellness, financial, retirement, education, and time off benefits.